23105 matches found
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
...
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.
...
Portworx Half-Blind SSRF in kube-controller-manager
...
Chromium: CVE-2025-14174 Out of bounds memory access in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2025-14174 exists in the wild...
usb: storage: sddr55: Reject out-of-bound new_pba
...
Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
...
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
...
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
...
Chromium: CVE-2025-14373 Inappropriate implementation in Toolbar
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-14372 Use after free in Password Manager
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Apache HTTP Server: mod_md (ACME), unintended retry intervals
...
Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...
...
c-ares has a Use After Free vulnerability when connection is cleaned up after error
...
urllib3 Streaming API improperly handles highly compressed data
...
urllib3 allows an unbounded number of links in the decompression chain
...
net: stmmac: Correctly handle Rx checksum offload errors
...
f2fs: fix infinite loop in __insert_extent_tree()
...
drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
...
nvme-fc: use lock accessing port_state and rport state
...
smb: client: fix potential UAF in smb2_close_cached_fid()
...
sctp: Prevent TOCTOU out-of-bounds write
...
nvmet-fc: avoid scheduling association deletion twice
...
futex: Don't leak robust_list pointer on exec race
...
Windows Admin Center Elevation of Privilege Vulnerability
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally...
NFSD: Fix crash in nfsd4_read_release()
...
btrfs: ensure no dirty metadata is written back for an fs with errors
...
net: bridge: fix use-after-free due to MST port state bypass
...
fbdev: bitblit: bound-check glyph index in bit_putcs*
...
accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
...
fbcon: Set fb_display[i]->mode to NULL when the mode is released
...
amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
...
Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
...
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
...
Bluetooth: hci_event: validate skb length for unknown CC opcode
...
wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
...
bpf: Sync pending IRQ work before freeing ring buffer
...
virtio-net: fix received length check in big packets
...
Bluetooth: bcsp: receive data only if registered
...
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Microsoft Office Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Access Remote Code Execution Vulnerability
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally...
Azure Monitor Agent Remote Code Execution Vulnerability
Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network...
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...