This email has been sent from the Critical Vulnerabilities notification of the SURF/secops project.

2 vulnerabilities have been updated on 2025-10-15 between 20:00 and 20:59.

High Vulnerability (1)

CVE-2025-36630 - 8.4

In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege.

Medium Vulnerability (1)

CVE-2023-52925 - 6.2

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't fail inserts if duplicate has expired nftables selftests fail: run-tests.sh...