Skip to content

Commit 71bcc03

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-m68q-4hqr-mc6f GHSA-r6gx-fcg6-8hhj GHSA-2rf3-6xwj-242m GHSA-3hmw-h9hw-mx39 GHSA-9f92-cqmm-3frg GHSA-f6mf-j487-747p GHSA-fh67-v6r3-9f98 GHSA-gfgh-99f9-3f6g GHSA-j77f-3hf7-7rvg GHSA-m7w9-hq85-2537 GHSA-mhm2-77w6-f4f8 GHSA-pqmf-56qm-jqf9 GHSA-q9c5-4g2g-c25m GHSA-r6v6-gcvm-4vxr GHSA-wpgp-vmg7-5726 GHSA-wxmq-5jpw-8955 GHSA-xmxh-pm35-h64j GHSA-xqm7-qxfg-5xwm
1 parent 5660f08 commit 71bcc03

File tree

18 files changed

+552
-4
lines changed

18 files changed

+552
-4
lines changed

‎advisories/github-reviewed/2025/09/GHSA-m68q-4hqr-mc6f/GHSA-m68q-4hqr-mc6f.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-m68q-4hqr-mc6f",
4-
"modified": "2025-12-11T06:30:24Z",
4+
"modified": "2025-12-11T12:30:27Z",
55
"published": "2025-09-16T15:32:37Z",
66
"aliases": [
77
"CVE-2025-4953"
@@ -80,6 +80,10 @@
8080
"type": "WEB",
8181
"url": "https://access.redhat.com/errata/RHSA-2025:22724"
8282
},
83+
{
84+
"type": "WEB",
85+
"url": "https://access.redhat.com/errata/RHSA-2025:22732"
86+
},
8387
{
8488
"type": "WEB",
8589
"url": "https://access.redhat.com/errata/RHSA-2025:2703"

‎advisories/unreviewed/2025/11/GHSA-r6gx-fcg6-8hhj/GHSA-r6gx-fcg6-8hhj.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-r6gx-fcg6-8hhj",
4-
"modified": "2025-12-08T09:30:17Z",
4+
"modified": "2025-12-11T12:30:27Z",
55
"published": "2025-11-25T09:31:24Z",
66
"aliases": [
77
"CVE-2025-13502"
@@ -27,6 +27,10 @@
2727
"type": "WEB",
2828
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
2929
},
30+
{
31+
"type": "WEB",
32+
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
33+
},
3034
{
3135
"type": "WEB",
3236
"url": "https://access.redhat.com/security/cve/CVE-2025-13502"

‎advisories/unreviewed/2025/12/GHSA-2rf3-6xwj-242m/GHSA-2rf3-6xwj-242m.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2rf3-6xwj-242m",
4+
"modified": "2025-12-11T12:30:28Z",
5+
"published": "2025-12-11T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-64994"
8+
],
9+
"details": "A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-SetWorkRate instruction prior V17.1. The improper handling of executable search paths could allow local attackers with write access to a PATH directory on a device to escalate privileges and execute arbitrary code as SYSTEM.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64994"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-427"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-11T12:16:26Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-3hmw-h9hw-mx39/GHSA-3hmw-h9hw-mx39.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3hmw-h9hw-mx39",
4+
"modified": "2025-12-11T12:30:28Z",
5+
"published": "2025-12-11T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-64987"
8+
],
9+
"details": "A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-CheckSimpleIoC instruction. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64987"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-11T12:16:25Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-9f92-cqmm-3frg/GHSA-9f92-cqmm-3frg.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-9f92-cqmm-3frg",
4+
"modified": "2025-12-11T12:30:27Z",
5+
"published": "2025-12-11T12:30:27Z",
6+
"aliases": [
7+
"CVE-2025-12687"
8+
],
9+
"details": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12687"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-11T12:16:23Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-f6mf-j487-747p/GHSA-f6mf-j487-747p.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-f6mf-j487-747p",
4-
"modified": "2025-12-08T09:30:17Z",
4+
"modified": "2025-12-11T12:30:27Z",
55
"published": "2025-12-04T18:30:53Z",
66
"aliases": [
77
"CVE-2025-66287"
@@ -27,6 +27,10 @@
2727
"type": "WEB",
2828
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
2929
},
30+
{
31+
"type": "WEB",
32+
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
33+
},
3034
{
3135
"type": "WEB",
3236
"url": "https://access.redhat.com/security/cve/CVE-2025-66287"

‎advisories/unreviewed/2025/12/GHSA-fh67-v6r3-9f98/GHSA-fh67-v6r3-9f98.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-fh67-v6r3-9f98",
4+
"modified": "2025-12-11T12:30:28Z",
5+
"published": "2025-12-11T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-64993"
8+
],
9+
"details": "A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64993"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-11T12:16:26Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-gfgh-99f9-3f6g/GHSA-gfgh-99f9-3f6g.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-gfgh-99f9-3f6g",
4+
"modified": "2025-12-11T12:30:28Z",
5+
"published": "2025-12-11T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-46266"
8+
],
9+
"details": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46266"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-11T12:16:25Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-j77f-3hf7-7rvg/GHSA-j77f-3hf7-7rvg.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-j77f-3hf7-7rvg",
4-
"modified": "2025-12-08T09:30:17Z",
4+
"modified": "2025-12-11T12:30:27Z",
55
"published": "2025-12-03T12:30:14Z",
66
"aliases": [
77
"CVE-2025-13947"
@@ -27,6 +27,10 @@
2727
"type": "WEB",
2828
"url": "https://access.redhat.com/errata/RHSA-2025:22790"
2929
},
30+
{
31+
"type": "WEB",
32+
"url": "https://access.redhat.com/errata/RHSA-2025:23110"
33+
},
3034
{
3135
"type": "WEB",
3236
"url": "https://access.redhat.com/security/cve/CVE-2025-13947"

‎advisories/unreviewed/2025/12/GHSA-m7w9-hq85-2537/GHSA-m7w9-hq85-2537.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-m7w9-hq85-2537",
4+
"modified": "2025-12-11T12:30:28Z",
5+
"published": "2025-12-11T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-64986"
8+
],
9+
"details": "A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64986"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-11T12:16:25Z"
35+
}
36+
}

0 commit comments

Comments
 (0)