Vulnerabilities
August 2025 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 0 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 286 vulnerabilities across 286 returned patch records from 1 vendor. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 2 of 2 · records 201 to 286 of 286
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2025-38513 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
CVE-2025-38524 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablerxrpc: Fix recv-recv race of completed call
CVE-2025-38539 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletracing: Add down_write(trace_event_sem) when adding trace event
CVE-2025-38510 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablekasan: remove kasan_find_vm_area() to prevent possible deadlock
CVE-2025-38531 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: common: st_sensors: Fix use of uninitialize device structs
CVE-2025-38542 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: appletalk: Fix device refcount leak in atrtr_create()
CVE-2025-38503 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix assertion when building free space tree
CVE-2025-38526 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableice: add NULL check in eswitch lag check
CVE-2025-38546 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableatm: clip: Fix memory leak of struct clip_vcc.
CVE-2025-38540 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
CVE-2025-38550 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipv6: mcast: Delay put pmc->idev in mld_del_delrec()
CVE-2025-55199 ↗cbl2 helm 3.14.2-7 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHelm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
CVE-2025-55198 ↗cbl2 helm 3.14.2-7 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHelm May Panic Due To Incorrect YAML Content
CVE-2025-58058 ↗cbl2 containerized-data-importer 1.55.0-23 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegithub.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives
CVE-2025-53859 ↗cbl2 nginx 1.22.1-13 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNGINX ngx_mail_smtp_module vulnerability
CVE-2025-54389 ↗cbl2 aide 0.16-16 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAIDE improper output neutralization vulnerability
CVE-2025-8846 ↗azl3 nasm 2.16.01-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNASM Netwide Assember parser.c parse_line stack-based overflow
CVE-2025-9390 ↗azl3 vim 9.1.1552-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablevim xxd xxd.c main buffer overflow
CVE-2025-9403 ↗cbl2 jq 1.6-4 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablejqlang jq JSON jq_test.c run_jq_tests assertion
CVE-2025-8845 ↗azl3 nasm 2.16.01-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNASM Netwide Assember nasm.c assemble_file stack-based overflow
CVE-2025-8851 ↗azl3 libtiff 4.6.0-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow
CVE-2025-38616 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletls: handle data disappearing from under the TLS ULP
CVE-2025-38645 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/mlx5: Check device memory pointer before usage
CVE-2025-38670 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablearm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
CVE-2025-38643 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
CVE-2025-8844 ↗cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNASM Netwide Assember preproc.c parse_smacro_template null pointer dereference
CVE-2025-38646 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
CVE-2025-38634 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepower: supply: cpcap-charger: Fix null check for power_supply_get_by_name
CVE-2025-38640 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Disable migration in nf_hook_run_bpf().
CVE-2025-8843 ↗cbl2 nasm 2.16-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow
CVE-2025-38624 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI: pnv_php: Clean up allocated IRQs on unplug
CVE-2025-38635 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableclk: davinci: Add NULL check in davinci_lpsc_clk_register()
CVE-2025-8842 ↗cbl2 nasm 2.16-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNASM Netwide Assember preproc.c do_directive use after free
CVE-2025-38664 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableice: Fix a null pointer dereference in ice_copy_and_init_pkg()
CVE-2025-38625 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablevfio/pds: Fix missing detach_ioas op
CVE-2025-38623 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI: pnv_php: Fix surprise plug detection and recovery
CVE-2025-38663 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenilfs2: reject invalid file types when reading inodes
CVE-2025-38648 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: stm32: Check for cfg availability in stm32_spi_probe
CVE-2025-38650 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehfsplus: remove mutex_lock check in hfsplus_free_extents
CVE-2025-38639 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: xt_nfacct: don't assume acct name is null-terminated
CVE-2025-8837 ↗azl3 jasper 4.2.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableJasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free
CVE-2025-38626 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
CVE-2025-38636 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablerv: Use strings in da monitors tracepoints
CVE-2025-8836 ↗azl3 jasper 4.2.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableJasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion
CVE-2025-38630 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
CVE-2025-38627 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
CVE-2025-38622 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: drop UFO packets in udp_rcv_segment()
CVE-2025-8734 ↗azl3 bison 3.8.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Bison scan-code.c code_free double free
CVE-2025-8733 ↗azl3 bison 3.8.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Bison obprintf.c __obstack_vprintf_internal assertion
CVE-2025-38671 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablei2c: qup: jump out of the loop in case of timeout
CVE-2025-38644 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: mac80211: reject TDLS operations when station is not associated
CVE-2025-38659 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegfs2: No more self recovery
CVE-2025-38653 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableproc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
CVE-2025-4877 ↗cbl2 libssh 0.10.6-2 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: write beyond bounds in binary to base64 conversion functions
CVE-2025-9165 ↗azl3 libtiff 4.6.0-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak
CVE-2025-49755 ↗Microsoft Edge for AndroidLow0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability
CVE-2025-58160 ↗azl3 kata-containers 3.19.1.kata2-2 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableTracing logging user input may result in poisoning logs with ANSI escape sequences
CVE-2024-13978 ↗azl3 libtiff 4.6.0-8 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableLibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference
CVE-2025-54350 ↗azl3 iperf3 3.17.1-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableIn iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt.
CVE-2025-8961 ↗azl3 libtiff 4.6.0-7 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableLibTIFF tiffcrop tiffcrop.c main memory corruption
CVE-2025-8713 ↗azl3 postgresql 16.9-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
CVE-2025-8732 ↗azl3 libxml2 2.11.5-6 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablelibxml2 xmlcatalog xmlParseSGMLCatalog recursion
CVE-2025-8835 ↗azl3 jasper 4.2.1-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableJasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference
CVE-2025-50422 ↗azl3 cairo 1.18.0-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableCairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.
CVE-2025-9301 ↗cbl2 cmake 3.21.4-18 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailablecmake cmForEachCommand.cxx ReplayItems assertion
CVE-2025-8534 ↗cbl2 libtiff 4.6.0-8 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailablelibtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference
CVE-2023-26819 ↗azl3 ceph 18.2.2-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablecJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.
CVE-2025-9478 ↗Microsoft Edge (Chromium-based)N/AOut-of-band4%Microsoft rating unavailableChromium: CVE-2025-9478 Use after free in ANGLE
CVE-2025-9132 ↗Microsoft Edge (Chromium-based)N/AOut-of-band3%Microsoft rating unavailableChromium: CVE-2025-9132 Out of bounds write in V8
CVE-2025-8882 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8882 Use after free in Aura
CVE-2025-8881 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8881 Inappropriate implementation in File Picker
CVE-2025-8880 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8880 Race in V8
CVE-2025-8901 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8901 Out of bounds write in ANGLE
CVE-2025-8879 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8879 Heap buffer overflow in libaom
CVE-2025-8583 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8583 Inappropriate implementation in Permissions
CVE-2025-8582 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8582 Insufficient validation of untrusted input in DOM
CVE-2025-8581 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8581 Inappropriate implementation in Extensions
CVE-2025-8580 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8580 Inappropriate implementation in Filesystems
CVE-2025-8579 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8579 Inappropriate implementation in Gemini Live in Chrome
CVE-2025-8578 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8578 Use after free in Cast
CVE-2025-8577 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8577 Inappropriate implementation in Picture In Picture
CVE-2025-8576 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-8576 Use after free in Extensions
CVE-2015-3310 ↗Not reportedN/AOut-of-band5%Microsoft rating unavailableBuffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.
CVE-2022-4743 ↗Not reportedN/AOut-of-band1%Microsoft rating unavailableA potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.
CVE-2023-37464 ↗Not reportedN/AOut-of-band1%Microsoft rating unavailableIncorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose
CVE-2025-38611 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablevmci: Prevent the dispatching of uninitialized payloads
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.