Wednesday, May 14, 2025 Security Releases

Wednesday, May 14, 2025 Security Releases Security releases available Updates are now available for the 24.x, 23.x, 22.x, 20.x Node.js release lines for the following issues. Improper error handling in async cryptographic operations crashes process CVE-2025-23166 - high The C++ method...

CVE-2025-4574

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

CVE-2024-28036

creationtimestamp| type| source ---|---|--- 2025-05-13 21:31:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16256...

CVE-2024-47795

creationtimestamp| type| source ---|---|--- 2025-05-13 21:30:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16240 2025-05-13 22:08:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3hof7mmhy2...

CVE-2024-43420

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel AtomR processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-43554

creationtimestamp| type| source ---|---|--- 2025-05-13 21:02:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3e3q5wo2b2 2025-05-14 00:07:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3pehyfim2w...

CVE-2025-30315

creationtimestamp| type| source ---|---|--- 2025-05-13 21:02:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3e3mvhclx2...

CVE-2025-45865

creationtimestamp| type| source ---|---|--- 2025-05-13 20:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eafkeki2t 2025-05-13 23:56:41+00:00| seen| https://t.me/cvedetector/25240...

CVE-2025-27197

creationtimestamp| type| source ---|---|--- 2025-05-13 20:47:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3e6lqfdi2t 2025-05-13 21:24:41+00:00| seen| https://t.me/cvedetector/25233...

CVE-2025-43568

creationtimestamp| type| source ---|---|--- 2025-05-13 20:30:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16222 2025-05-14 00:07:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3peicvix24...

CVE-2025-43570

creationtimestamp| type| source ---|---|--- 2025-05-13 20:30:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16220 2025-05-13 21:02:18+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3e3z5aapb2 2025-05-14 00:07:23+00:00| seen|...

CVE-2025-31225

creationtimestamp| type| source ---|---|--- 2025-05-13 19:31:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16209...

GHSA-WJMP-WPHQ-JVQF

creationtimestamp| type| source ---|---|--- 2025-05-13 19:30:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16202...

CVE-2025-43546

creationtimestamp| type| source ---|---|--- 2025-05-13 19:23:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp376bptrtr2 2025-05-13 20:48:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eafnvkr2r 2025-05-13...

CVE-2025-43547

creationtimestamp| type| source ---|---|--- 2025-05-13 19:21:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp36uywqtn22 2025-05-13 20:48:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eafdsnv2h 2025-05-13...

CVE-2025-3744

creationtimestamp| type| source ---|---|--- 2025-05-13 19:00:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114502062413712501 2025-05-13 19:21:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp36v5yt6r72 2025-05-13...

CVE-2025-43556

creationtimestamp| type| source ---|---|--- 2025-05-13 18:11:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp32x47o72j2 2025-05-13 18:30:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16185 2025-05-13 20:48:13+00:00| seen|...

CVE-2025-30330

creationtimestamp| type| source ---|---|--- 2025-05-13 18:11:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp32wuo3gar2 2025-05-13 20:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eafh2ou2w 2025-05-13...

CVE-2025-30319

creationtimestamp| type| source ---|---|--- 2025-05-13 17:44:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2yreeb2ok2...

CVE-2025-3757

Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification...