CVE-2025-41061

creationtimestamp| type| source ---|---|--- 2025-09-04 11:27:19+00:00| seen| Telegram/e8KfhkhcHcWWs5F9kfeZjUWR9V7-aBvLRxxCnwddlmWyC8...

dlm: prevent NPD when writing a positive value to event_done

...

CVE-2025-41690

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user Maintenance by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive...

tracing: Add down_write(trace_event_sem) when adding trace event

...

xen/events: close evtchn after mapping cleanup

...

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.

...

CVE-2025-36909

creationtimestamp| type| source ---|---|--- 2025-09-04 05:27:31+00:00| seen| Telegram/MqnDH8JmdggmnLPiCMiw5-2xJAtpmzaFsi5dLKNWVl9-D9Y...

RDMA/hns: Fix UAF for cq async event

...

When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of it. This had the effect of negating SameSite cookie protections. This was addressed in the spec and then in browsers. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

...

x86/fred: Clear WFE in missing-ENDBRANCH #CPs

...

usb: xhci: Fix isochronous Ring Underrun/Overrun event handling

...

CVE-2025-9928

creationtimestamp| type| source ---|---|--- 2025-09-04 01:25:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxxygf5egt2z 2025-09-04 06:44:53+00:00| seen| https://gist.github.com/Darkcrai86/a6fb7168e425dd29a6a716e5a820bef5 2025-09-04 06:58:55+00:00| seen|...

CVE-2025-9927

creationtimestamp| type| source ---|---|--- 2025-09-04 01:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxxy5gokkn2t 2025-09-04 06:45:07+00:00| seen| https://gist.github.com/Darkcrai86/f763cd16ac6d5d6da094a704013f2327 2025-09-04 06:59:09+00:00| seen|...

CVE-2025-54599

The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, when a victim changes the email address that they have configured. To exploit this, an attacker would create their own account and perform an SSO login. The roo...

PT-2025-36021

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in IInputMethodSessionWrapper.java within the Android operating system. An untrusted application may inject key and motion events into the default Input Method Editor IME due ...

PT-2025-36079

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: An issue exists in Android where an application may be able to monitor motion events due to a confused deputy condition. This could result in local information disclosure without requiring...

drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle

...

CVE-2025-55748

creationtimestamp| type| source ---|---|--- 2025-09-03 23:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxxqcvdug22g 2025-09-04 00:02:14+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxxtriiq7p2f 2025-10-17 03:47:37+00:00| confirmed|...

CVE-2025-57052

creationtimestamp| type| source ---|---|--- 2025-09-03 18:58:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxxcrvi6z727 2025-09-04 06:01:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxyhtll5cs2o 2025-09-08 03:28:19+00:00| seen|...

CVE-2025-9864

creationtimestamp| type| source ---|---|--- 2025-09-03 18:43:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxxbyctodd2n 2025-09-03 19:07:42+00:00| seen| https://gist.github.com/Darkcrai86/e1bc49175024faefa84024d749ac7fed 2025-09-03 20:28:49+00:00| seen|...