EUVD-2025-131932

An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...

CVE-2025-59089

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...

CVE-2025-40168

creationtimestamp| type| source ---|---|--- 2025-11-12 11:42:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gl2i56eh2s 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-02-20 14:25:23+00:00| seen|...

CVE-2025-40170

In the Linux kernel, the following vulnerability has been resolved: net: use dstdevrcu in sksetupcaps Use RCU to protect accesses to dst-dev from sksetupcaps and skdstgsomaxsize. Also use dstdevrcu in ip6dstmtumaybeforward, and ipdstmtumaybeforward. ip4dsthoplimit can use dstdevnetrcu...

CVE-2025-40150

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid migrating empty section It reports a bug from device w/ zufs: F2FS-fs dm-64: Inconsistent segment 173822 type 1, 0 in SSA and SIT F2FS-fs dm-64: Stopped filesystem due to reason: 4 Thread A Thread B -...

CVE-2025-40168

In the Linux kernel, the following vulnerability has been resolved: smc: Use skdstget and dstdevrcu in smcclcprfxmatch. smcclcprfxmatch is called from smclistenwork and not under RCU nor RTNL. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and dstdevrcu. Note that the returned value o...

CVE-2025-40144

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-40146

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix potential deadlock while nrrequests grown Allocate and free schedtags while queue is freezed can deadlock1, this is a long term problem, hence allocate memory before freezing queue and free memory after queue is...

CVE-2025-40128

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-40160

In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...

CVE-2025-40110

creationtimestamp| type| source ---|---|--- 2025-11-12 03:33:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5fpqq7luz26 2025-11-12 05:15:10+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5fvghxu2tu2 2025-12-03 14:14:49+00:00| seen|...

CVE-2025-40815

creationtimestamp| type| source ---|---|--- 2025-11-12 00:27:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ffe3rkhl2k 2025-11-12 00:36:29+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5fft3hadft2 2025-11-13 11:00:00+00:00| seen|...

CVE-2025-40760

creationtimestamp| type| source ---|---|--- 2025-11-11 23:48:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5fd5lm2wq2n 2025-11-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-16...

CVE-2025-40827

creationtimestamp| type| source ---|---|--- 2025-11-11 21:55:31+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5f4tzu3v5u2 2025-11-11 23:36:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5fcinokwh2n 2025-11-12 00:36:30+00:00| seen|...

CVE-2020-22623

creationtimestamp| type| source ---|---|--- 2025-11-11 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m5ezvpmn4e2j...

CVE-2025-63667

creationtimestamp| type| source ---|---|--- 2025-11-11 21:00:05+00:00| published-proof-of-concept| Telegram/shWj4yVZfYZ8SMMOaybmV9yApMn3mNDIaTU298AMpVdB8 2025-11-12 15:44:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gyl44wzc26...

libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

CVE-2025-33000

creationtimestamp| type| source ---|---|--- 2025-11-11 18:35:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5erpntrsr2s...

SUSE-SU-2025:3681-1 Security update for go1.25

This update for go1.25 fixes the following issues: go1.25.3 released 2025-10-13 includes fixes to the crypto/x509 package. bsc1244485 CVE-2025-58187 go75861 crypto/x509: TLS validation fails for FQDNs with trailing dot go75777 spec: Go1.25 spec should be dated closer to actual release date Furthe...

CVE-2025-62210

creationtimestamp| type| source ---|---|--- 2025-11-11 17:30:42+00:00| seen| https://www.thezdi.com/blog/2025/11/11/the-november-2025-security-update-review 2025-11-11 22:03:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5f5cphbz32k...