CVE-2025-20985 – Microsoft Xbox ThemeManager Privilege Escalation Vulnerability

June 4, 2025

CVE ID : CVE-2025-20985

Published : June 4, 2025, 5:15 a.m. | 2 hours, 18 minutes ago

Description : Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items.

Severity: 5.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-20984 – Samsung Cloud for Galaxy Watch Default Permission Vulnerability

Next Article Custom Active Directory Client-Side Extensions Enable Stealthy Corporate Backdoors

Highlights

CVE-2025-5124 – Sony Security Camera Default Credentials Vulnerability

May 24, 2025

CVE ID : CVE-2025-5124

Published : May 24, 2025, 1:15 p.m. | 3 hours, 45 minutes ago

Description : A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. It is recommended to change the configuration settings. The vendor was contacted early about this issue. They confirmed the existence but pointed out that they “have published the ‘Hardening Guide’ on the Web from July 2018 to January 2025 and have thoroughly informed customers of the recommendation to change their initial passwords”.

Severity: 8.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

CVE-2025-20985 – Microsoft Xbox ThemeManager Privilege Escalation Vulnerability

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

CVE-2025-47854 – JetBrains TeamCity Open Redirect Vulnerability

The Alters shattered my expectations of reality and questioned my life’s decisions

CVE-2025-4344 – D-Link DIR-600L Remote Buffer Overflow in formLogin

I put my Bose QuietComfort Ultra away within hours of testing these headphones

CVE-2025-5124 – Sony Security Camera Default Credentials Vulnerability

Helldivers 2 on Xbox could strike Halo gold — I’m begging you, please add this one thing

Amazon’s Starlink challenger set for launch – here’s when you’ll be able to use it

CVE-2025-5224 – Campcodes Online Hospital Management System SQL Injection Vulnerability

CVE-2025-20985 – Microsoft Xbox ThemeManager Privilege Escalation Vulnerability

Related Posts