Vulnerabilities
September 2025 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 0 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 401 vulnerabilities across 401 returned patch records from 1 vendor. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 2 of 3 · records 201 to 400 of 401
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2023-53387 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: ufs: core: Fix device management cmd timeout flow
CVE-2023-53383 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableirqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4
CVE-2023-53367 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableaccel/habanalabs: fix mem leak in capture user mappings
CVE-2023-53366 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableblock: be a bit more careful in checking for NULL bdev while polling
CVE-2023-53438 ↗cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86/MCE: Always save CS register on AMD Zen IF Poison errors
CVE-2023-53429 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: don't check PageError in __extent_writepage
CVE-2023-53424 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableclk: mediatek: fix of_iomap memory leak
CVE-2023-53421 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableblk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
CVE-2023-53410 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUSB: ULPI: fix memory leak with using debugfs_lookup()
CVE-2023-53355 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablestaging: pi433: fix memory leak with using debugfs_lookup()
CVE-2023-53353 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableaccel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()
CVE-2023-53348 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix deadlock when aborting transaction during relocation with scrub
CVE-2023-53347 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/mlx5: Handle pairing of E-switch via uplink un/load APIs
CVE-2022-50407 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: hisilicon/qm - increase the memory of local variables
CVE-2023-53332 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegenirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
CVE-2023-53323 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext2/dax: Fix ext2_setsize when len is page aligned
CVE-2022-50357 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: dwc3: core: fix some leaks in probe
CVE-2023-53231 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableerofs: Fix detection of atomic context
CVE-2023-53209 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: mac80211_hwsim: Fix possible NULL dereference
CVE-2022-50304 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemtd: core: fix possible resource leak in init_mtd()
CVE-2022-50303 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdkfd: Fix double release compute pasid
CVE-2023-53248 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: install stub fence into potential unused fence pointers
CVE-2023-53247 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand
CVE-2023-53240 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexsk: check IFF_UP earlier in Tx path
CVE-2023-53221 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Fix memleak due to fentry attach failure
CVE-2022-50316 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableorangefs: Fix kmemleak in orangefs_sysfs_init()
CVE-2023-53292 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableblk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
CVE-2023-53261 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecoresight: Fix memory leak in acpi_buffer->pointer
CVE-2022-50266 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablekprobes: Fix check for probe enabled in kill_kprobe()
CVE-2023-53178 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm: fix zswap writeback race condition
CVE-2022-50350 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: target: iscsi: Fix a race condition between login_work and the login thread
CVE-2025-4953 ↗azl3 skopeo 1.14.4-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePodman: build context bind mount
CVE-2023-53149 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: avoid deadlock in fs reclaim with page writeback
CVE-2022-50260 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/msm: Make .remove and .shutdown HW shutdown consistent
CVE-2022-50256 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/meson: remove drm bridges at aggregate driver unbind time
CVE-2023-53152 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: fix calltrace warning in amddrm_buddy_fini
CVE-2022-50236 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiommu/mediatek: Fix crash on isr after kexec()
CVE-2025-55554 ↗cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
CVE-2025-9232 ↗azl3 openssl 3.3.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOut-of-bounds read in HTTP client no_proxy handling
CVE-2025-9231 ↗azl3 rust 1.90.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableTiming side-channel in SM2 algorithm on 64 bit ARM
CVE-2025-55558 ↗cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableA buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS).
CVE-2025-55560 ↗azl3 pytorch 2.2.2-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAn issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.
CVE-2025-46150 ↗cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.
CVE-2025-46149 ↗cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.
CVE-2025-46153 ↗cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.
CVE-2025-11083 ↗azl3 binutils 2.41-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow
CVE-2025-11082 ↗cbl2 crash 8.0.1-4 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow
CVE-2025-11081 ↗cbl2 binutils 2.37-16 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils objdump.c dump_dwarf_section out-of-bounds
CVE-2025-46148 ↗cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
CVE-2025-46152 ↗cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
CVE-2025-10911 ↗cbl2 libxslt 1.1.34-8 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibxslt: use-after-free with key data stored cross-rvt
CVE-2025-60018 ↗azl3 glib-networking 2.78.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGlib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"
CVE-2025-59825 ↗azl3 kata-containers-cc 3.15.0.aks0-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableastral-tokio-tar has a path traversal in tar extraction
CVE-2025-8869 ↗azl3 python-pip 24.2-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableFallback tar extraction in pip doesn't check symbolic links point to extraction directory
CVE-2025-58354 ↗azl3 kata-containers 3.19.1.kata2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKata Containers coco-tdx malicious host can circumvent initdata verification
CVE-2025-39880 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibceph: fix invalid accesses to ceph_connection_v1_info
CVE-2025-39876 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
CVE-2025-39869 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledmaengine: ti: edma: Fix memory allocation size for queue_priority_map
CVE-2025-39867 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nft_set_pipapo: fix null deref for empty set
CVE-2025-39886 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
CVE-2025-39877 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/damon/sysfs: fix use-after-free in state_show()
CVE-2025-39881 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablekernfs: Fix UAF in polling when open file is released
CVE-2025-39885 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableocfs2: fix recursive semaphore deadlock in fiemap call
CVE-2025-10824 ↗cbl2 fio 3.30-2 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableaxboe fio init.c __parse_jobs_ini use after free
CVE-2025-10823 ↗azl3 fio 3.37-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableaxboe fio options.c str_buffer_pattern_cb null pointer dereference
CVE-2025-39838 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecifs: prevent NULL pointer dereference in UTF16 conversion
CVE-2025-39846 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
CVE-2025-39848 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableax25: properly unshare skbs in ax25_kiss_rcv()
CVE-2025-39859 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog
CVE-2025-39844 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm: move page table sync declarations to linux/pgtable.h
CVE-2025-39847 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableppp: fix memory leak in pad_compress_skb
CVE-2025-39862 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: mt76: mt7915: fix list corruption after hardware restart
CVE-2025-39857 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
CVE-2025-39842 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableocfs2: prevent release journal inode after journal shutdown
CVE-2025-39845 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
CVE-2025-39849 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
CVE-2025-39812 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesctp: initialize more fields in sctp_v6_from_sk()
CVE-2025-39808 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
CVE-2025-39805 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: macb: fix unregister_netdev call order in macb_remove()
CVE-2025-39829 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletrace/fgraph: Fix the warning caused by missing unregister notifier
CVE-2025-39827 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: rose: include node references in rose_neigh refcount
CVE-2025-39813 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableftrace: Fix potential warning in trace_printk_seq during ftrace_dump
CVE-2025-39819 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefs/smb: Fix inconsistent refcnt update
CVE-2022-50380 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm: /proc/pid/smaps_rollup: fix no vma's null-deref
CVE-2025-39826 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: rose: convert 'use' field to refcount_t
CVE-2025-39794 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableARM: tegra: Use I/O memcpy to write to IRAM
CVE-2025-39799 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableACPI: processor: perflib: Move problematic pr->performance check
CVE-2025-39801 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: dwc3: Remove WARN_ON for device endpoint command timeouts
CVE-2025-39795 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableblock: avoid possible overflow for chunk_sectors check in blk_stack_limits()
CVE-2025-39797 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfrm: Duplicate SPI Handling
CVE-2025-39798 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNFS: Fix the setting of capabilities when automounting a new filesystem
CVE-2025-59375 ↗cbl2 expat 2.6.4-2 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
CVE-2025-48040 ↗cbl2 erlang 25.3.2.21-2 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMalicious Key Exchange Messages may Lead to Excessive Resource Consumption
CVE-2025-9086 ↗azl3 curl 8.11.1-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOut of bounds read for cookie path
CVE-2025-39744 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablercu: Fix rcu_read_unlock() deadloop due to IRQ work
CVE-2025-39737 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
CVE-2025-39772 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/hisilicon/hibmc: fix the hibmc loaded failed bug
CVE-2025-40300 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86/vmscape: Add conditional IBPB mitigation
CVE-2025-39763 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
CVE-2025-39752 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableARM: rockchip: fix kernel hang during smp initialization
CVE-2025-39787 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesoc: qcom: mdt_loader: Ensure we don't read past the ELF header
CVE-2025-39748 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Forget ranges when refining tnum after JSET
CVE-2025-39789 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: x86/aegis - Add missing error checks
CVE-2025-39747 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/msm: Add error handling for krealloc in metadata setup
CVE-2025-39767 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLoongArch: Optimize module load time by optimizing PLT/GOT counting
CVE-2025-39773 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: bridge: fix soft lockup in br_multicast_query_expired()
CVE-2025-39739 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiommu/arm-smmu-qcom: Add SM6115 MDSS compatible
CVE-2025-39762 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: add null check
CVE-2025-39754 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/smaps: fix race between smaps_hugetlb_range and migration
CVE-2025-39736 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
CVE-2025-39779 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: subpage: keep TOWRITE tag until folio is cleaned
CVE-2025-39753 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
CVE-2025-39764 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: ctnetlink: remove refcounting in expectation dumpers
CVE-2025-39758 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
CVE-2025-39760 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: core: config: Prevent OOB read in SS endpoint companion parsing
CVE-2025-39781 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableparisc: Drop WARN_ON_ONCE() from flush_cache_vmap
CVE-2025-39756 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefs: Prevent file descriptor table allocations exceeding INT_MAX
CVE-2025-39745 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablercutorture: Fix rcutorture_one_extend_check() splat in RT kernels
CVE-2025-39783 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI: endpoint: Fix configfs group list head handling
CVE-2025-58364 ↗cbl2 cups 2.3.3-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecups: Remote DoS via null dereference
CVE-2025-48039 ↗azl3 erlang 26.2.5.13-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUnverified Paths can Cause Excessive Use of System Resources
CVE-2025-48041 ↗azl3 erlang 26.2.5.13-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSSH_FXP_OPENDIR may Lead to Exhaustion of File Handles
CVE-2025-48038 ↗azl3 erlang 26.2.5.13-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUnverified File Handles can Cause Excessive Use of System Resources
CVE-2025-10148 ↗azl3 curl 8.11.1-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepredictable WebSocket mask
CVE-2025-9901 ↗azl3 libsoup 3.4.4-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsoup: improper handling of http vary header in libsoup caching
CVE-2025-39681 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
CVE-2025-38736 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
CVE-2025-39676 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: qla4xxx: Prevent a potential error pointer dereference
CVE-2025-39679 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
CVE-2025-39714 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: usbtv: Lock resolution while streaming
CVE-2025-39719 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: imu: bno055: fix OOB access of hw_xlate array
CVE-2025-39716 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableparisc: Revise __get_user() to probe user read access
CVE-2025-39675 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
CVE-2025-39715 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableparisc: Revise gateway LWS calls to probe user read access
CVE-2025-39701 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableACPI: pfr_update: Fix the driver update version check
CVE-2025-38734 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/smc: fix UAF on smcsk after smc_listen_out()
CVE-2025-39707 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities
CVE-2025-39706 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdkfd: Destroy KFD debugfs after destroy KFD wq
CVE-2025-39677 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/sched: Fix backlog accounting in qdisc_dequeue_internal
CVE-2025-39705 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: fix a Null pointer dereference vulnerability
CVE-2025-39693 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Avoid a NULL pointer dereference
CVE-2025-39687 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: light: as73211: Ensure buffer holes are zeroed
CVE-2025-39720 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableksmbd: fix refcount leak causing resource not released
CVE-2025-39724 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableserial: 8250: fix panic due to PSLVERR
CVE-2025-39692 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
CVE-2025-39684 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecomedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
CVE-2025-39718 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablevsock/virtio: Validate length in packet header before skb_put()
CVE-2025-39710 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: venus: Add a check for packet size after reading from shared memory
CVE-2025-39686 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecomedi: Make insn_rw_emulate_bits() do insn->n samples
CVE-2025-39685 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecomedi: pcl726: Prevent invalid irq number
CVE-2025-39726 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailables390/ism: fix concurrency management in ism_cmd()
CVE-2025-39709 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: venus: protect against spurious interrupts during probe
CVE-2025-39697 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNFS: Fix a race when updating an existing write
CVE-2025-39703 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet, hsr: reject HSR frame if skb can't hold tag
CVE-2025-38700 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
CVE-2025-38701 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
CVE-2025-38706 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
CVE-2025-38704 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablercu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
CVE-2025-38725 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: usb: asix_devices: add phy_mask for ax88772 mdio bus
CVE-2025-38717 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: kcm: Fix race condition in kcm_unattach()
CVE-2025-38722 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehabanalabs: fix UAF in export_dmabuf()
CVE-2025-38711 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb/server: avoid deadlock when linking with ReplaceIfExists
CVE-2025-38721 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: ctnetlink: fix refcount leak on table dump
CVE-2025-38712 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
CVE-2025-38687 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecomedi: fix race between polling and detaching
CVE-2025-38705 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/pm: fix null pointer access
CVE-2025-38707 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefs/ntfs3: Add sanity check for file name
CVE-2025-38716 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehfs: fix general protection fault in hfs_find_init()
CVE-2025-38730 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableio_uring/net: commit partial buffers on retry
CVE-2025-38708 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrbd: add missing kref_get in handle_write_conflicts
CVE-2025-38698 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablejfs: Regular file corruption check
CVE-2025-38695 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
CVE-2025-38681 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
CVE-2025-38709 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableloop: Avoid updating block size under exclusive owner
CVE-2025-38691 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepNFS: Fix uninited ptr deref in block/scsi layout
CVE-2025-38696 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMIPS: Don't crash in stack_top() for tasks without ABI or vDSO
CVE-2025-38723 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLoongArch: BPF: Fix jump offset calculation in tailcall
CVE-2025-38678 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nf_tables: reject duplicate device on updates
CVE-2025-47967 ↗Microsoft Edge (Chromium-based)LowOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability
CVE-2025-60019 ↗cbl2 glib-networking 2.70.0-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableGlib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()
CVE-2025-58767 ↗azl3 ruby 3.3.5-6 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableREXML has a DoS condition when parsing malformed XML file
CVE-2025-58749 ↗cbl2 fluent-bit 3.0.6-4 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableWAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode
CVE-2025-8277 ↗cbl2 libssh 0.10.6-2 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableLibssh: memory exhaustion via repeated key exchange in libssh
CVE-2025-7039 ↗cbl2 glib 2.71.0-5 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableGlib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()
CVE-2025-10892 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-10892 Integer overflow in V8
CVE-2025-10891 ↗Microsoft Edge (Chromium-based)N/AOut-of-band7%Microsoft rating unavailableChromium: CVE-2025-10891 Integer overflow in V8
CVE-2025-10890 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-10890 Side-channel information leakage in V8
CVE-2025-10501 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-10501 Use after free in WebRTC
CVE-2025-10502 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-10502 Heap buffer overflow in ANGLE
CVE-2025-10500 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-10500 Use after free in Dawn
CVE-2025-10201 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-10201 Inappropriate implementation in Mojo
CVE-2025-10200 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableChromium: CVE-2025-10200 Use after free in Serviceworker
CVE-2024-21907 ↗Microsoft SQL Server 2017 for x64-based Systems (GDR)N/A33%Microsoft rates: Exploitation Less LikelyPublicly disclosedKB5065222KB5065223VulnCheck: CVE-2024-21907 Improper Handling of Exceptional Conditions in Newtonsoft.Json
CVE-2025-9867 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-9867 Inappropriate implementation in Downloads
CVE-2025-9866 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-9866 Inappropriate implementation in Extensions
CVE-2025-9865 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-9865 Inappropriate implementation in Toolbar
CVE-2025-9864 ↗Microsoft Edge (Chromium-based)N/AOut-of-bandNot availableMicrosoft rating unavailableChromium: CVE-2025-9864 Use after free in V8
CVE-2025-39731 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/ANot availableMicrosoft rating unavailablef2fs: vm_unmap_ram() may be called from an invalid context
CVE-2025-38713 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablehfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
CVE-2025-38715 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablehfs: fix slab-out-of-bounds in hfs_bnode_read()
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.