CVE-2025-29841

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362 CWE-416

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-298427.5Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a netw CVE-2025-298435.4A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.CVE-2025-298444.3A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.CVE-2025-298454.3A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.CVE-2025-298467.2A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.CVE-2025-298477.5A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC engine and data source function CVE-2025-29858.8A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part o CVE-2025-29865.4IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbit CVE-2025-298646.2Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before CVE-2025-298658.7: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Tr CVE-2025-298668.8: External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free CVE-2025-298678.5Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom Office 2018, Hancom Inc. Hancom Office 202