2025 CVEs (page 267)
Page 267 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38170 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Discard stale CPU state when handling SME traps The logic for handling SME… |
CVE-2025-38169 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thre… |
CVE-2025-38168 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure When a resource allocation fails in one cl… |
CVE-2025-38167 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdr_first_de() return value The hdr_first_de() function returns a pointe… |
CVE-2025-38166 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut here ]------------ [ 21… |
CVE-2025-38165 | High | 7.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skb_linearize The panic can be reproduced by executi… |
CVE-2025-38164 | High | 7.1 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: f2fs: zone: fix to avoid inconsistence in between SIT and SSA w/ below testcase, it will… |
CVE-2025-38163 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi->total_valid_block_count syzbot reported a f2fs bug a… |
CVE-2025-38162 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation When calculating t… |
CVE-2025-38161 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction Upon RQ destruction if… |
CVE-2025-38160 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() devm_kasprintf() returns NULL… |
CVE-2025-38159 | High | 7.1 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6… |
CVE-2025-38158 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: fix XQE dma address error The dma addresses of EQE and AEQE are wrong… |
CVE-2025-38157 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Abort software beacon handling if disabled A malicious USB device can se… |
CVE-2025-38156 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() devm_ioremap() returns N… |
CVE-2025-38155 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() devm_ioremap() returns N… |
CVE-2025-38154 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->sk_socket is not lock… |
CVE-2025-38153 | High | 7.1 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy of syzbot… |
CVE-2025-38151 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work The cited commit fixed… |
CVE-2025-38150 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: af_packet: move notifier's packet_dev_mc out of rcu critical section Syzkaller reports th… |
CVE-2025-38149 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: phy: clear phydev->devlink when the link is deleted There is a potential crash issue… |
CVE-2025-38148 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step timestamping Fix memory leak when run… |
CVE-2025-38147 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: calipso: Don't call calipso functions for AF_INET sk. syzkaller reported a null-ptr-deref… |
CVE-2025-38146 | Critical | 9.4 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet may not end… |
CVE-2025-38145 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() devm_kasprintf() returns NULL wh… |
CVE-2025-38144 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovo_se30_wdt: Fix possible devm_ioremap() NULL pointer dereference in lenovo_… |
CVE-2025-38143 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wled_configure() devm_kasprintf() returns NULL when… |
CVE-2025-38142 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) check sensor index in read_string() Prevent a potential invalid… |
CVE-2025-38141 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table() returned NULL, dm_put_live_table() was… |
CVE-2025-38140 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dm: limit swapping tables for devices with zone write plugs dm_revalidate_zones() only al… |
CVE-2025-38139 | Critical | 9.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting the subreq iterator Fix the resetting o… |
CVE-2025-38138 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Add NULL check in udma_probe() devm_kasprintf() returns NULL when memory a… |
CVE-2025-38137 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to trigger u… |
CVE-2025-38136 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Reorder clock handling and power management in probe Reorder the init… |
CVE-2025-38135 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlb_usio_probe() devm_ioremap() can return NULL o… |
CVE-2025-38134 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink() As demonstrate… |
CVE-2025-38133 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4851: fix ad4858 chan pointer handling The pointer returned from ad4851_parse… |
CVE-2025-38132 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfg_csdev_lock while removing cscfg from csdev There'll be possible… |
CVE-2025-38131 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While enable active… |
CVE-2025-38130 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: drm/connector: only call HDMI audio helper plugged cb if non-null On driver remove, sound… |
CVE-2025-38129 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_… |
CVE-2025-38128 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands In 'mgmt_hci_cmd_sync()', check w… |
CVE-2025-38127 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: ice: fix Tx scheduler error handling in XDP callback When the XDP program is loaded, the… |
CVE-2025-38126 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping The stmmac… |
CVE-2025-38125 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: make sure that ptp_rate is not 0 before configuring EST If the ptp_rate reco… |
CVE-2025-38124 | High | 7.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: fix udp gso skb_segment after pull from frag_list Commit a1e40ac5b5e9 ("net: gso: fi… |
CVE-2025-38123 | Critical | 9.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling requests… |
CVE-2025-38122 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO gve_alloc_pending_pa… |
CVE-2025-38121 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: avoid panic on init failure In case of an error during init, in_hw_re… |
CVE-2025-38120 | Critical | 9.4 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo_avx2: fix initial map fill If the first field doesn't cover the… |
CVE-2025-38119 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: ufs: Fix a hang in the error handler ufshcd_err_handling_prepare() calls ufsh… |
CVE-2025-38118 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_OP_REMOVE_… |
CVE-2025-38117 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Protect mgmt_pending list with its own lock This uses a mutex to protect… |
CVE-2025-38116 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12k_core_init() When the execution of ath12k_core_hw_group_as… |
CVE-2025-38115 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: fix a potential crash on gso_skb handling SFQ has an assumption of al… |
CVE-2025-38114 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: e1000: Move cancel_work_sync to avoid deadlock Previously, e1000_down called cancel_work_… |
CVE-2025-38113 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other… |
CVE-2025-38112 | Medium | 4.7 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in sk_is_readable() sk->sk_prot->sock_is_readable is a valid functi… |
CVE-2025-38111 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available… |
CVE-2025-38110 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly… |
CVE-2025-38109 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual fu… |
CVE-2025-38108 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net_sched: red: fix a race in __red_change() Gerrard Tai reported a race condition in RED… |
CVE-2025-38107 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: fix a race in ets_qdisc_change() Gerrard Tai reported a race condition in… |
CVE-2025-38106 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() syzbot reports: B… |
CVE-2025-38105 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initializes the t… |
CVE-2025-38103 | High | 7.1 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() Update struct hid_de… |
CVE-2025-38102 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify During our test… |
CVE-2025-38101 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() Enlarge the critical se… |
CVE-2025-38100 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIF_IO_BITMAP inconsistencies io_bitmap_exit() is invoked from exit_thread… |
CVE-2025-38099 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken A SCO connecti… |
CVE-2025-38098 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink … |
CVE-2025-38097 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: espintcp: remove encap socket caching to avoid reference leak The current scheme for cach… |
CVE-2025-38096 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: don't warn when if there is a FW error iwl_trans_reclaim is warning if it… |
CVE-2025-38095 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mb() inserts memory b… |
CVE-2025-38094 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fix a possible deadlock in macb_halt_tx. There is a situation where a… |
CVE-2025-5944 | Medium | 6.4 | 2025-07-03 | The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-caption’ attribute in all versions up to… |
CVE-2025-52842 | Medium | 6.1 | 2025-07-02 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Laundry on Linux, MacOS allows Account Takeover. T… |
CVE-2025-52559 | Medium | 6.8 | 2025-07-02 | Zulip is an open-source team chat application. From versions 2.0.0-rc1 to before 10.4 in Zulip Server, the /digest/ URL of a server shows a preview of what the… |
CVE-2025-43025 | High | 7.5 | 2025-07-02 | HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in versions of UPD 7.4 or older (e.g., v7.3.x, v7.2.x, v7.1.x… |
CVE-2025-34079 | High | 7.8 | 2025-07-02 | An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A rem… |
CVE-2025-34078 | High | 7.8 | 2025-07-02 | A local privilege escalation vulnerability exists in NSClient++ 0.5.2.35 when both the web interface and ExternalScripts features are enabled. The configuratio… |
CVE-2025-34076 | High | 7.2 | 2025-07-02 | An authenticated local file inclusion vulnerability exists in Microweber CMS versions <= 1.2.11 through misuse of the backup management API. Authenticated user… |
CVE-2025-34074 | | 2025-07-02 | An authenticated remote code execution vulnerability exists in Lucee’s administrative interface due to insecure design in the scheduled task functionality. An… | |
CVE-2025-49713 | High | 8.8 | 2025-07-02 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2025-45813 | Critical | 9.8 | 2025-07-02 | ENENSYS IPGuard v2 2.10.0 was discovered to contain hardcoded credentials. |
CVE-2025-52841 | High | 8.8 | 2025-07-02 | Cross-Site Request Forgery (CSRF) vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0. |
CVE-2025-45814 | Critical | 9.8 | 2025-07-02 | Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a s… |
CVE-2025-45424 | Medium | 5.3 | 2025-07-02 | Incorrect access control in Xinference before v1.4.0 allows attackers to access the Web GUI without authentication. |
CVE-2025-20309 | Critical | 10.0 | 2025-07-02 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could… |
CVE-2025-20307 | Medium | 4.8 | 2025-07-02 | A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to condu… |
CVE-2025-6943 | Low | 3.8 | 2025-07-02 | Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables. |
CVE-2025-6942 | Low | 3.8 | 2025-07-02 | The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that… |
CVE-2025-53359 | | 2025-07-02 | ethereum is a common ethereum structs for Rust. Prior to ethereum crate v0.18.0, signature malleability (according to EIP-2) was only checked for "legacy" tran… | |
CVE-2025-53358 | Medium | 6.5 | 2025-07-02 | kotaemon is an open-source RAG-based tool for document comprehension. From versions 0.10.6 and prior, in libs/ktem/ktem/index/file/ui.py, the index_fn method a… |
CVE-2025-52886 | Medium | 5.9 | 2025-07-02 | Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is po… |
CVE-2025-20310 | Medium | 6.1 | 2025-07-02 | A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting… |
CVE-2025-20308 | Medium | 6.0 | 2025-07-02 | A vulnerability in Cisco Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying o… |
CVE-2025-6725 | Medium | 5.4 | 2025-07-02 | In the PdfViewer component, a Cross-Site Scripting (XSS) vulnerability is possible if a specially-crafted document has already been loaded and the user engages… |
CVE-2025-53494 | Medium | 6.5 | 2025-07-02 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TwoColConflict Ex… |
CVE-2025-53493 | Medium | 6.5 | 2025-07-02 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extensi… |