Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploited
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-12480 | Improper Access Control in Gladinet Triofox Exploited in the Wild | 9.1 | 96% | KEVPoC | KEV |
CVE-2025-20333+1 related CVE | Authenticated Buffer Overflow RCE in Cisco ASA/FTD VPN Web Server | 9.9 group max | 71% | KEV | KEV |
| CVE-2025-21042 | Out-of-Bounds Write RCE in Samsung Mobile Image Codec (libimagecodec.quram.so) | 9.8 | 36% | KEV | KEV |
| CVE-2025-62215 | Local Privilege Escalation via Race Condition in Microsoft Windows Kernel | 7.0 | 4% | KEVPoC | KEV |
From the original article
9 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: In this Help Net Security interview, Andrea Succi, Group CISO at Ferrari Group, discusses how cybersecurity is integrated into every aspect of the logistics industry. He explains why protecting data can be as critical as securing physical assets and how a layered defense approach helps safeguard both.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.