2025 CVEs (page 358)
Page 358 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-26688 | High | 7.8 | 2025-04-08 | Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally. |
CVE-2025-26687 | High | 7.5 | 2025-04-08 | Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-26686 | High | 7.5 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
CVE-2025-26682 | High | 7.5 | 2025-04-08 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2025-26681 | Medium | 6.7 | 2025-04-08 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
CVE-2025-26680 | High | 7.5 | 2025-04-08 | Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network. |
CVE-2025-26679 | High | 7.8 | 2025-04-08 | Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-26678 | High | 8.4 | 2025-04-08 | Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally. |
CVE-2025-26676 | Medium | 6.5 | 2025-04-08 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-26675 | High | 7.8 | 2025-04-08 | Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2025-26674 | High | 7.8 | 2025-04-08 | Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. |
CVE-2025-26673 | High | 7.5 | 2025-04-08 | Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network. |
CVE-2025-26672 | Medium | 6.5 | 2025-04-08 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-26671 | High | 8.1 | 2025-04-08 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2025-26670 | High | 8.1 | 2025-04-08 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2025-26669 | High | 8.8 | 2025-04-08 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-26668 | High | 7.5 | 2025-04-08 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. |
CVE-2025-26667 | Medium | 6.5 | 2025-04-08 | Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose info… |
CVE-2025-26666 | High | 7.8 | 2025-04-08 | Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. |
CVE-2025-26665 | High | 7.0 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally. |
CVE-2025-26664 | Medium | 6.5 | 2025-04-08 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-26663 | High | 8.1 | 2025-04-08 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2025-26652 | High | 7.5 | 2025-04-08 | Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network. |
CVE-2025-26651 | Medium | 6.5 | 2025-04-08 | Exposed dangerous method or function in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network. |
CVE-2025-26649 | High | 7.0 | 2025-04-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate… |
CVE-2025-26648 | High | 7.8 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-26647 | High | 8.8 | 2025-04-08 | Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network. |
CVE-2025-26644 | Medium | 5.1 | 2025-04-08 | Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to pe… |
CVE-2025-26642 | High | 7.8 | 2025-04-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-26641 | High | 7.5 | 2025-04-08 | Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network. |
CVE-2025-26640 | High | 7.0 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-26639 | High | 7.8 | 2025-04-08 | Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-26637 | Medium | 6.8 | 2025-04-08 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
CVE-2025-26635 | Medium | 6.5 | 2025-04-08 | Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network. |
CVE-2025-26628 | High | 7.3 | 2025-04-08 | Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally. |
CVE-2025-25002 | Medium | 6.8 | 2025-04-08 | Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network. |
CVE-2025-24074 | High | 7.8 | 2025-04-08 | Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2025-24073 | High | 7.8 | 2025-04-08 | Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2025-24062 | High | 7.8 | 2025-04-08 | Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2025-24060 | High | 7.8 | 2025-04-08 | Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2025-24058 | High | 7.8 | 2025-04-08 | Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2025-21222 | High | 8.8 | 2025-04-08 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-21221 | High | 8.8 | 2025-04-08 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-21205 | High | 8.8 | 2025-04-08 | Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-21204 | High | 7.8 | 2025-04-08 | Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. |
CVE-2025-21203 | Medium | 6.5 | 2025-04-08 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-21197 | Medium | 6.5 | 2025-04-08 | Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permissi… |
CVE-2025-21191 | High | 7.0 | 2025-04-08 | Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. |
CVE-2025-21174 | High | 7.5 | 2025-04-08 | Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network. |
CVE-2025-32279 | Medium | 4.3 | 2025-04-08 | Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through <= 4.8.5. |
CVE-2025-32211 | Medium | 6.5 | 2025-04-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet Ads broadstreet allows Stored XSS… |
CVE-2025-32164 | Medium | 6.5 | 2025-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in maennchen1.de m1.DownloadList m1downloadlist allows Retrieve Embedd… |
CVE-2025-32117 | High | 7.1 | 2025-04-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light all… |
CVE-2025-30671 | Medium | 6.5 | 2025-04-08 | Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
CVE-2025-30670 | Medium | 6.5 | 2025-04-08 | Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
CVE-2025-27443 | Low | 2.8 | 2025-04-08 | Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local acces… |
CVE-2025-27442 | Medium | 4.6 | 2025-04-08 | Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access. |
CVE-2025-27441 | Medium | 4.6 | 2025-04-08 | Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access. |
CVE-2025-27085 | Medium | 4.9 | 2025-04-08 | Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vul… |
CVE-2025-27084 | Medium | 5.4 | 2025-04-08 | A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site s… |
CVE-2025-27083 | High | 7.2 | 2025-04-08 | Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Successful explo… |
CVE-2025-27082 | High | 7.2 | 2025-04-08 | Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating system… |
CVE-2025-25227 | High | 7.5 | 2025-04-08 | Insufficient state checks lead to a vector that allows to bypass 2FA checks. |
CVE-2025-25226 | Critical | 9.8 | 2025-04-08 | Improper handling of identifiers lead to a SQL injection vulnerability in the quoteNameStr method of the database package. Please note: the affected method is… |
CVE-2025-3289 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper valid… |
CVE-2025-3288 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer… |
CVE-2025-3287 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper valid… |
CVE-2025-3286 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer… |
CVE-2025-3285 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer… |
CVE-2025-32028 | Critical | 9.9 | 2025-04-08 | HAX CMS PHP allows you to manage your microsite universe with PHP backend. Multiple file upload functions within the HAX CMS PHP application call a ’save’ func… |
CVE-2025-32026 | Low | 3.8 | 2025-04-08 | Element Web is a Matrix web client built using the Matrix React SDK. Element Web, starting from version 1.11.16 up to version 1.11.96, can be configured to loa… |
CVE-2025-32025 | | 2025-04-08 | bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The buffer created for parsing metadata for… | |
CVE-2025-32024 | | 2025-04-08 | bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The EXIF data format allows for defining exc… | |
CVE-2025-32018 | High | 8.0 | 2025-04-08 | Cursor is a code editor built for programming with AI. In versions 0.45.0 through 0.48.6, the Cursor app introduced a regression affecting the set of file path… |
CVE-2025-32017 | High | 8.8 | 2025-04-08 | Umbraco is a free and open source .NET content management system. Authenticated users to the Umbraco backoffice are able to craft management API request that e… |
CVE-2025-2829 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer… |
CVE-2025-2293 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer… |
CVE-2025-2288 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer… |
CVE-2025-2287 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of us… |
CVE-2025-2286 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of us… |
CVE-2025-2285 | High | 7.8 | 2025-04-08 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of us… |
CVE-2025-27079 | Medium | 6.0 | 2025-04-08 | A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perfo… |
CVE-2025-27078 | Medium | 6.5 | 2025-04-08 | A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating… |
CVE-2025-1095 | High | 8.8 | 2025-04-08 | IBM Personal Communications v14 and v15 include a Windows service that is vulnerable to local privilege escalation (LPE). The vulnerability allows any interact… |
CVE-2025-32406 | High | 8.6 | 2025-04-08 | An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML r… |
CVE-2025-32020 | | 2025-04-08 | The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort param… | |
CVE-2025-22466 | High | 8.2 | 2025-04-08 | Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to obtain admin privileges… |
CVE-2025-22465 | Medium | 6.1 | 2025-04-08 | Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to execute arbitrary javas… |
CVE-2025-22464 | Medium | 6.1 | 2025-04-08 | An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local acce… |
CVE-2025-22461 | High | 7.2 | 2025-04-08 | SQL injection in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote authenticated attacker with admin privileges to ach… |
CVE-2025-22459 | Medium | 4.8 | 2025-04-08 | Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to inter… |
CVE-2025-22458 | High | 7.8 | 2025-04-08 | DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to System. |
CVE-2025-31498 | | 2025-04-08 | c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue a quer… | |
CVE-2025-30151 | High | 7.5 | 2025-04-08 | Shopware is an open commerce platform. It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. This vu… |
CVE-2025-30150 | Medium | 5.3 | 2025-04-08 | Shopware 6 is an open commerce platform based on Symfony Framework and Vue. Through the store-api it is possible as a attacker to check if a specific e-mail ad… |
CVE-2025-25254 | High | 7.2 | 2025-04-08 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and below, version 7.4.6 and… |
CVE-2025-22855 | Low | 2.7 | 2025-04-08 | An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient before 7.4.1 may allow t… |
CVE-2025-2876 | Medium | 5.3 | 2025-04-08 | The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability… |
CVE-2025-2568 | Medium | 5.3 | 2025-04-08 | The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missin… |
CVE-2025-30166 | Medium | 4.8 | 2025-04-08 | Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. An HTML injection issue allows users with access to the email sending functionality to inject… |