📅 Weekly CVE Roundup
December 1 - December 7, 2025
🔴 Critical & High Severity Vulnerabilities
These are the most dangerous vulnerabilities disclosed this week. Prioritize patching these.
A missing authentication vulnerability in Synology BeeDrive desktop software allows local users to execute arbitrary code without proper authenticatio...
Dec 4This path traversal vulnerability in Synology BeeDrive desktop software allows local users to execute arbitrary code by manipulating file paths. It af...
Dec 4This CVE describes a missing authorization vulnerability in Synology BeeDrive desktop software that allows remote attackers to delete arbitrary files ...
Dec 4🏢 Most Affected Vendors
🐛 Common Vulnerability Types
📋 All CVEs This Week
A missing authentication vulnerability in Synology BeeDrive desktop software allows local users to execute arbitrary cod...
This path traversal vulnerability in Synology BeeDrive desktop software allows local users to execute arbitrary code by ...
This CVE describes a missing authorization vulnerability in Synology BeeDrive desktop software that allows remote attack...
A heap buffer overread vulnerability in util-linux's setpwnam() function allows reading beyond allocated memory when pro...
This vulnerability in Synology BeeDrive desktop software allows local users to write arbitrary files containing non-sens...
