Complete article archive
664 published articles · Showing 577–588 · Newest first
Memory Leak Vulnerability in VMware HGFS (CVE-2025-22226)
An out-of-bounds read vulnerability in the Host Guest File System (HGFS) allows attackers with administrative privileges on a virtual machine to leak memory from the vmx process across ESXi, Workstation, and Fusion.
Read article →VMware ESXi Sandbox Escape (CVE-2025-22225)
Analysis of CVE-2025-22225, an arbitrary write vulnerability in VMware ESXi that allows attackers with VMX process privileges to escape the sandbox. This flaw is noted for use in ransomware campaigns.
Read article →VMware ESXi and Workstation TOCTOU Race Condition (CVE-2025-22224)
Analysis of CVE-2025-22224, a race condition in VMware ESXi and Workstation that allows local VM administrators to execute code on the host VMX process.
Read article →Linux Kernel Memory Leak (CVE-2024-50302)
Analysis of CVE-2024-50302, a use of uninitialized resource vulnerability in the Linux kernel that allows for kernel memory leaks via crafted HID reports.
Read article →Progress WhatsUp Gold Path Traversal (CVE-2024-4885)
Analysis of a path traversal vulnerability in Progress WhatsUp Gold that enables unauthenticated remote code execution and the requirements for verifying mitigation.
Read article →Windows Win32k Local Privilege Escalation (CVE-2018-8639)
Analysis of CVE-2018-8639, a kernel-mode privilege escalation vulnerability in Microsoft Windows Win32k identified for use in ransomware campaigns.
Read article →Hitachi Vantara Pentaho BA Server Command Execution (CVE-2022-43769)
Analysis of a special element injection vulnerability in Hitachi Vantara Pentaho BA Server that allows arbitrary command execution via Spring templates.
Read article →Hitachi Vantara Pentaho BA Server Authorization Bypass (CVE-2022-43939)
Analysis of an authorization bypass vulnerability in Hitachi Vantara Pentaho BA Server caused by the use of non-canonical URL paths, including remediation priorities and validation strategies.
Read article →Cisco Small Business RV Series Routers: CVE-2023-20118 Command Injection
Analysis of a command injection vulnerability in Cisco Small Business RV Series Routers that allows authenticated remote attackers to obtain root privileges.
Read article →Zimbra Collaboration Suite CVE-2023-34192 XSS Exposure
Analysis of a remote authenticated cross-site scripting vulnerability in Synacor Zimbra Collaboration Suite (ZCS) affecting the /h/autoSaveDraft function.
Read article →Privilege Escalation in Microsoft Partner Center (CVE-2024-49035)
CISA has added CVE-2024-49035 to the Known Exploited Vulnerabilities catalog, identifying an improper access control flaw in Microsoft Partner Center that enables privilege escalation.
Read article →Oracle Agile PLM Deserialization Vulnerability (CVE-2024-20953)
Analysis of CVE-2024-20953 affecting Oracle Agile PLM, focusing on the risks associated with deserialization and the requirements for verifying remediation in infrastructure environments.
Read article →Page 49 of 56. This archive includes every published article; drafts and articles still processing are not public.
From government advisory to practical action
Vulnerability Assurance turns government cybersecurity reporting into original articles written for the people responsible for fixing vulnerabilities. Each analysis connects the source information to the decisions, corrective actions, and verification steps that matter in an affected environment.
Latest analysis
What our articles cover
- What happened: the vulnerability, the affected technology, and what the available evidence establishes.
- Who needs to act: relevant versions, configurations, exposure conditions, and operational dependencies.
- How to mitigate it: applicable patches, configuration changes, or compensating controls, with important limitations.
- How to verify the result: checks and retesting that can demonstrate whether the affected condition or exposure remains.
- What remains unresolved: uncertainty, residual risk, and follow-up work.
Analysis you can use here
Government advisories provide the evidence behind our reporting. Our articles explain that evidence in context and add practical mitigation and validation guidance. Source citations support the analysis; they do not replace it.
Turn security intelligence into action.
Discuss your exposure, priorities, and the evidence needed to validate the outcome.
Request a security assessment ↗