CVE-2025-22425

In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-26450

In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...

CVE-2025-38728

creationtimestamp| type| source ---|---|--- 2025-09-04 16:48:21+00:00| seen| https://gist.github.com/Darkcrai86/e3634613248a35a5e2b326dafa2cdbae 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-01-08 18:12:16+00:00| seen|...

CVE-2025-38679

In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The eventseqchanged handler processes a variable number of properties sent by the firmware. The number of properties is indicated by the firmware and used t...

AZL-66863 CVE-2025-38679 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The eventseqchanged handler processes a variable number of properties sent by the firmware. The number of properties is indicated by the firmware and used t...

CVE-2025-38679

CVE-2025-38679 – Linux kernel media venus OOB read : The vulnerability is in media: venus where event_seq_changed() processes a firmware property count without validating the payload length, enabling out-of-bounds memory access. Impact: kernel crashes and potential information disclosure if firmw...

CVE-2025-41044

creationtimestamp| type| source ---|---|--- 2025-09-04 11:27:39+00:00| seen| Telegram/FatR2RFi9g-L8hOGxdSQfgDOlTnIWcq7g0w89KqY0rBr0...

CVE-2025-41061

creationtimestamp| type| source ---|---|--- 2025-09-04 11:27:19+00:00| seen| Telegram/e8KfhkhcHcWWs5F9kfeZjUWR9V7-aBvLRxxCnwddlmWyC8...

dlm: prevent NPD when writing a positive value to event_done

...

CVE-2025-41690

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user Maintenance by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive...

tracing: Add down_write(trace_event_sem) when adding trace event

...

xen/events: close evtchn after mapping cleanup

...

CVE-2025-36909

creationtimestamp| type| source ---|---|--- 2025-09-04 05:27:31+00:00| seen| Telegram/MqnDH8JmdggmnLPiCMiw5-2xJAtpmzaFsi5dLKNWVl9-D9Y...

RDMA/hns: Fix UAF for cq async event

...

When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of it. This had the effect of negating SameSite cookie protections. This was addressed in the spec and then in browsers. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

...

x86/fred: Clear WFE in missing-ENDBRANCH #CPs

...

usb: xhci: Fix isochronous Ring Underrun/Overrun event handling

...

CVE-2025-9928

creationtimestamp| type| source ---|---|--- 2025-09-04 01:25:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxxygf5egt2z 2025-09-04 06:44:53+00:00| seen| https://gist.github.com/Darkcrai86/a6fb7168e425dd29a6a716e5a820bef5 2025-09-04 06:58:55+00:00| seen|...

CVE-2025-9927

creationtimestamp| type| source ---|---|--- 2025-09-04 01:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxxy5gokkn2t 2025-09-04 06:45:07+00:00| seen| https://gist.github.com/Darkcrai86/f763cd16ac6d5d6da094a704013f2327 2025-09-04 06:59:09+00:00| seen|...

CVE-2025-54599

The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, when a victim changes the email address that they have configured. To exploit this, an attacker would create their own account and perform an SSO login. The roo...