<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: vpn</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-5687: A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root.
*This bug only</title><link>https://patchthecve.com/cve/CVE-2025-5687.html</link><guid>https://patchthecve.com/cve/CVE-2025-5687.html</guid><pubDate>Wed, 17 Jun 2026 09:48:33 +0000</pubDate><description>HIGH 7.8: A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root.
*This bug only affects Mozilla VPN on macOS. Other operating systems are unaffected.*. This vulnerability was fixed in Mozilla VPN 2.28.0 (macOS).</description></item><item><title>CVE-2025-25568: SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread </title><link>https://patchthecve.com/cve/CVE-2025-25568.html</link><guid>https://patchthecve.com/cve/CVE-2025-25568.html</guid><pubDate>Wed, 17 Jun 2026 09:00:54 +0000</pubDate><description>CRITICAL 9.8: SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function. NOTE: the Supplier disputes this because the use-after-free is not in the VPN software, but is instead in a separate tool that has no untrusted input and runs under the user&#x27;s own </description></item><item><title>CVE-2025-25567: SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function</title><link>https://patchthecve.com/cve/CVE-2025-25567.html</link><guid>https://patchthecve.com/cve/CVE-2025-25567.html</guid><pubDate>Wed, 17 Jun 2026 09:00:54 +0000</pubDate><description>CRITICAL 9.8: SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function. NOTE: the Supplier disputes this because the behavior only enables a local user to attack himself through the UI,</description></item><item><title>CVE-2025-25566: Memory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of service via the Un</title><link>https://patchthecve.com/cve/CVE-2025-25566.html</link><guid>https://patchthecve.com/cve/CVE-2025-25566.html</guid><pubDate>Wed, 17 Jun 2026 09:00:54 +0000</pubDate><description>MEDIUM 5.6: Memory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of service via the UnixMemoryAlloc function. NOTE: the Supplier disputes this because the behavior is limited to a single allocation of a few hundred bytes with a command-line tool.</description></item><item><title>CVE-2025-25565: SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCe</title><link>https://patchthecve.com/cve/CVE-2025-25565.html</link><guid>https://patchthecve.com/cve/CVE-2025-25565.html</guid><pubDate>Wed, 17 Jun 2026 09:00:53 +0000</pubDate><description>CRITICAL 9.8: SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions. NOTE: the Supplier disputes this because the behavior only allows a user to attack himself by typing a long string on a command line.</description></item></channel></rss>