Vulnerabilityhigh
TP
- CVEs
- CVE-2025-64776CVE-2025-64301CVE-2025-64733CVE-2025-66042CVE-2025-62403CVE-2025-58427CVE-2025-62500CVE-2025-61979CVE-2025-61952CVE-2025-47873CVE-2025-66503CVE-2026-20726CVE-2025-66000CVE-2025-65119CVE-2026-22882CVE-2025-66617CVE-2025-66633CVE-2025-64735CVE-2025-66342CVE-2025-62673CVE-2025-59482CVE-2025-62405CVE-2025-59487CVE-2025-61983CVE-2025-62404CVE-2025-61944CVE-2025-58455CVE-2025-58077CVE-2025-62501CVE-2025-66176
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-66342 | A type confusion vulnerability exists in the EMF functionality of Canva Affinity | 7.8 group max | <1% | PoC ×2 | |
| CVE-2025-62673 | Heap-based Buffer Overflow vulnerability in Archer AX53 v1.0 and AX12 v1.0 (tdpserver modules) allows adjacent attackers to cause a segmentation fault or… | 8.6 group max | <1% | ||
| CVE-2025-66176 | There: If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted… | 8.8 | <1% |
From the original article
2 min read at blog.talosintelligence.com
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed a vulnerability in HikVision, as well as 10 in TP-Link, and 19 in Canva. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco’s third-party vulnerability disclosure policy .
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.