CYBERSECURITYTRACKER
TRACKING7,194 stories in this site build1,511 vulnerability news stories in this site build
Vulnerabilities

November 2025 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 1 vulnerability with exploitation detected in the wild this month. This defender-focused view covers 184 vulnerabilities across 184 returned patch records from 1 vendor. Filter the complete month, or browse the static page trail without JavaScript.

184all patch recordsClear filters14criticalShow these records1Microsoft exploitation detectedShow these records3Microsoft in the Known Exploited Vulnerabilities catalogShow these records81tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 1 of 1 · records 1 to 184 of 184

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2025-62215 ↗Windows 10 Version 1809 for 32-bit SystemsImportant6%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB5068779KB5068781
and 6 moreKB5068787KB5068791KB5068840KB5068861KB5068865KB5068966
Windows Kernel Elevation of Privilege Vulnerability
CVE-2025-60710 ↗Windows Server 2025 (Server Core installation)Important5%Microsoft rates: Exploitation Less LikelyCISA KEVVulnCheckENISAKB5072014KB5072033Host Process for Windows Tasks Elevation of Privilege Vulnerability
CVE-2025-13223 ↗Microsoft Edge (Chromium-based)N/AOut-of-band5%Microsoft rating unavailableCISA KEVVulnCheckENISAChromium: CVE-2025-13223 Type Confusion in V8
CVE-2025-49752 ↗Azure Bastion DeveloperCriticalOut-of-band1%Microsoft rates: N/AAzure Bastion Elevation of Privilege Vulnerability
CVE-2025-59245 ↗Microsoft SharePoint OnlineCriticalOut-of-band1%Microsoft rates: N/AMicrosoft SharePoint Online Elevation of Privilege Vulnerability
CVE-2025-62207 ↗Azure Monitor Control ServiceCriticalOut-of-band1%Microsoft rates: N/AAzure Monitor Elevation of Privilege Vulnerability
CVE-2025-62459 ↗Microsoft 365 Defender PortalCriticalOut-of-band0%Microsoft rates: N/AMicrosoft Defender Portal Spoofing Vulnerability
CVE-2025-64655 ↗Dynamics OmniChannel SDK Storage ContainersCriticalOut-of-band0%Microsoft rates: Exploitation More LikelyDynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability
CVE-2025-64656 ↗Azure App GatewayCriticalOut-of-band1%Microsoft rates: N/AAzure Application Gateway Elevation of Privilege Vulnerability
CVE-2025-64657 ↗Azure App GatewayCriticalOut-of-band1%Microsoft rates: N/AAzure Application Gateway Elevation of Privilege Vulnerability
CVE-2025-30398 ↗Nuance PowerScribe 360 version 4.0.5Critical1%Microsoft rates: Exploitation Less LikelyNuance PowerScribe 360 Information Disclosure Vulnerability
CVE-2025-60716 ↗Windows 10 Version 1809 for 32-bit SystemsCritical0%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 6 moreKB5068787KB5068791KB5068840KB5068861KB5068865KB5068966
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2025-60724 ↗Microsoft Office LTSC for Mac 2021Critical6%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
GDI+ Remote Code Execution Vulnerability
CVE-2025-62199 ↗Microsoft Office 2016 (32-bit edition)Critical1%Microsoft rates: Exploitation Less LikelyKB5002809Microsoft Office Remote Code Execution Vulnerability
CVE-2025-62214 ↗Microsoft Visual Studio 2022 version 17.14Critical1%Microsoft rates: Exploitation Less LikelyVisual Studio Remote Code Execution Vulnerability
CVE-2025-40165 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailablemedia: nxp: imx8-isi: m2m: Fix streaming cleanup on release
CVE-2025-40172 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailableaccel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
CVE-2025-64720 ↗Windows 10 Version 1809 for 32-bit SystemsImportantOut-of-band0%Microsoft rating unavailableKB5082052KB5082060
and 9 moreKB5082063KB5082123KB5082126KB5082127KB5082142KB5082198KB5082200KB5083768KB5083769
LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
CVE-2025-65018 ↗Windows 10 Version 1809 for 32-bit SystemsImportantOut-of-band0%Microsoft rating unavailableKB5082052KB5082060
and 9 moreKB5082063KB5082123KB5082126KB5082127KB5082142KB5082198KB5082200KB5083768KB5083769
LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
CVE-2025-64660 ↗Visual Studio CodeImportantOut-of-band1%Microsoft rates: Exploitation Less LikelyGitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
CVE-2025-47179 ↗Microsoft Configuration Manager 2403Important0%Microsoft rates: Exploitation Less LikelyConfiguration Manager Elevation of Privilege Vulnerability
CVE-2025-59240 ↗Microsoft Office LTSC 2021 for 32-bit editionsImportant1%Microsoft rates: Exploitation Less LikelyKB5002811Microsoft Excel Information Disclosure Vulnerability
CVE-2025-59499 ↗Microsoft SQL Server 2017 for x64-based Systems (GDR)Important1%Microsoft rates: Exploitation Less LikelyKB5068400KB5068401
and 6 moreKB5068402KB5068403KB5068404KB5068405KB5068406KB5068407
Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2025-59504 ↗Azure MonitorImportant0%Microsoft rates: Exploitation UnlikelyAzure Monitor Agent Remote Code Execution Vulnerability
CVE-2025-59505 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 9 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068905KB5068907KB5068966
Windows Smart Card Reader Elevation of Privilege Vulnerability
CVE-2025-59506 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5068779KB5068781
and 9 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068905KB5068907KB5068966
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2025-59507 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5068779KB5068781
and 7 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068966
Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2025-59508 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5068779KB5068781
and 7 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068966
Windows Speech Recognition Elevation of Privilege Vulnerability
CVE-2025-59509 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5068779KB5068781
and 6 moreKB5068787KB5068791KB5068840KB5068861KB5068865KB5068966
Windows Speech Recognition Information Disclosure Vulnerability
CVE-2025-59510 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 8 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068905KB5068966
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
CVE-2025-59511 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 6 moreKB5068787KB5068791KB5068840KB5068861KB5068865KB5068966
Windows WLAN Service Elevation of Privilege Vulnerability
CVE-2025-59512 ↗Windows 10 Version 1809 for 32-bit SystemsImportant3%Microsoft rates: Exploitation More LikelyKB5068779KB5068781
and 9 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068905KB5068907KB5068966
Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability
CVE-2025-59513 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 11 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068906KB5068908KB5068909KB5068966
Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability
CVE-2025-59514 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
CVE-2025-59515 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 4 moreKB5068791KB5068861KB5068865KB5068966
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
CVE-2025-60703 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVE-2025-60704 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2025-60705 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation More LikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Windows Client-Side Caching Elevation of Privilege Vulnerability
CVE-2025-60706 ↗Windows 10 Version 1809 for x64-based SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 7 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068966
Windows Hyper-V Information Disclosure Vulnerability
CVE-2025-60707 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 6 moreKB5068787KB5068791KB5068840KB5068861KB5068865KB5068966
Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability
CVE-2025-60708 ↗Windows 10 Version 1809 for x64-based SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 7 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068966
Storvsp.sys Driver Denial of Service Vulnerability
CVE-2025-60709 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2025-60713 ↗Windows Server 2019Important0%Microsoft rates: Exploitation UnlikelyKB5068779KB5068787
and 5 moreKB5068791KB5068840KB5068861KB5068864KB5068966
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
CVE-2025-60714 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 11 moreKB5068787KB5068791KB5068840KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909
Windows OLE Remote Code Execution Vulnerability
CVE-2025-60715 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-60717 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 4 moreKB5068791KB5068861KB5068865KB5068966
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
CVE-2025-60718 ↗Windows 11 Version 24H2 for ARM64-based SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068861KB5068966Windows Administrator Protection Elevation of Privilege Vulnerability
CVE-2025-60719 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation More LikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
1 mentionsWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-60720 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
CVE-2025-60721 ↗Windows 11 Version 25H2 for x64-based SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068861KB5068966Windows Administrator Protection Elevation of Privilege Vulnerability
CVE-2025-60722 ↗OneDrive for AndroidImportant1%Microsoft rates: Exploitation UnlikelyMicrosoft OneDrive for Android Elevation of Privilege Vulnerability
CVE-2025-60723 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 6 moreKB5068787KB5068791KB5068840KB5068861KB5068865KB5068966
DirectX Graphics Kernel Denial of Service Vulnerability
CVE-2025-60726 ↗Office Online ServerImportant1%Microsoft rates: Exploitation Less LikelyKB5002801KB5002810
and 1 moreKB5002811
Microsoft Excel Information Disclosure Vulnerability
CVE-2025-60727 ↗Office Online ServerImportant1%Microsoft rates: Exploitation Less LikelyKB5002801KB5002810
and 1 moreKB5002811
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-60728 ↗Microsoft 365 Apps for Enterprise for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyMicrosoft Excel Information Disclosure Vulnerability
CVE-2025-62200 ↗Office Online ServerImportant0%Microsoft rates: Exploitation Less LikelyKB5002801KB5002811Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-62201 ↗Office Online ServerImportant0%Microsoft rates: Exploitation Less LikelyKB5002801KB5002811Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-62202 ↗Office Online ServerImportant1%Microsoft rates: Exploitation Less LikelyKB5002801KB5002810
and 1 moreKB5002811
Microsoft Excel Information Disclosure Vulnerability
CVE-2025-62203 ↗Office Online ServerImportant1%Microsoft rates: Exploitation UnlikelyKB5002801KB5002811Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-62204 ↗Microsoft SharePoint Enterprise Server 2016Important2%Microsoft rates: Exploitation Less LikelyKB5002800KB5002803
and 1 moreKB5002805
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2025-62205 ↗Microsoft 365 Apps for Enterprise for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyMicrosoft Office Remote Code Execution Vulnerability
CVE-2025-62206 ↗Microsoft Dynamics 365 (on-premises) version 9.1Important1%Microsoft rates: Exploitation Less LikelyKB5067331Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVE-2025-62208 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows License Manager Information Disclosure Vulnerability
CVE-2025-62209 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows License Manager Information Disclosure Vulnerability
CVE-2025-62210 ↗Dynamics 365 Field Service (online)Important1%Microsoft rates: Exploitation UnlikelyDynamics 365 Field Service (online) Spoofing Vulnerability
CVE-2025-62211 ↗Dynamics 365 Field Service (online)Important1%Microsoft rates: Exploitation UnlikelyDynamics 365 Field Service (online) Spoofing Vulnerability
CVE-2025-62213 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation More LikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-62216 ↗Microsoft 365 Apps for Enterprise for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyMicrosoft Office Remote Code Execution Vulnerability
CVE-2025-62217 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation More LikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-62218 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5068781KB5068791
and 4 moreKB5068861KB5068864KB5068865KB5068966
Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability
CVE-2025-62219 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5068781KB5068791
and 4 moreKB5068861KB5068864KB5068865KB5068966
Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability
CVE-2025-62220 ↗Windows Subsystem for Linux GUIImportant1%Microsoft rates: Exploitation UnlikelyWindows Subsystem for Linux GUI Remote Code Execution Vulnerability
CVE-2025-62222 ↗Microsoft Visual Studio Code CoPilot Chat ExtensionImportant1%Microsoft rates: Exploitation Less LikelyAgentic AI and Visual Studio Code Remote Code Execution Vulnerability
CVE-2025-62449 ↗Microsoft Visual Studio Code CoPilot Chat ExtensionImportant0%Microsoft rates: Exploitation Less LikelyMicrosoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
CVE-2025-62452 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-62453 ↗Visual Studio CodeImportant0%Microsoft rates: Exploitation Less LikelyGitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
CVE-2025-12638 ↗azl3 keras 3.3.3-5 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablePath Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()
CVE-2025-66031 ↗cbl2 reaper 3.1.1-19 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenode-forge ASN.1 Unbounded Recursion
CVE-2025-12816 ↗cbl2 reaper 3.1.1-19 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailableCVE-2025-12816
CVE-2025-13601 ↗cbl2 glib 2.71.0-7 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailableGlib: integer overflow in in g_escape_uri_string()
CVE-2025-12977 ↗azl3 fluent-bit 3.1.9-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableCVE-2025-12977
CVE-2025-12970 ↗azl3 fluent-bit 3.1.10-2 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableCVE-2025-12970
CVE-2025-40211 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableACPI: video: Fix use-after-free in acpi_video_switch_brightness()
CVE-2025-13227 ↗azl3 nodejs 20.14.0-9 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-13226 ↗cbl2 nodejs18 18.20.3-9 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailableType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-13230 ↗cbl2 nodejs18 18.20.3-9 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailableType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-64324 ↗azl3 kubevirt 1.5.3-2 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableKubeVirt Vulnerable to Arbitrary Host File Read and Write
CVE-2025-47913 ↗cbl2 moby-compose 2.17.3-11 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailablePotential denial of service in golang.org/x/crypto/ssh/agent
CVE-2025-40204 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablesctp: Fix MAC comparison to be constant-time
CVE-2025-40205 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablebtrfs: avoid potential out-of-bounds in btrfs_encode_fh()
CVE-2025-40190 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableext4: guard against EA inode refcount underflow in xattr update
CVE-2025-40201 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablekernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
CVE-2025-40198 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
CVE-2024-47866 ↗azl3 ceph 18.2.2-11 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableRGW DoS attack with empty HTTP header in S3 object copy
CVE-2025-62689 ↗azl3 libmicrohttpd 0.9.77-3 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableNULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
CVE-2025-59777 ↗azl3 libmicrohttpd 0.9.77-3 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableNULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
CVE-2025-40176 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailabletls: wait for pending async decryptions if tls_strp_msg_hold fails
CVE-2025-40170 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenet: use dst_dev_rcu() in sk_setup_caps()
CVE-2025-40149 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailabletls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
CVE-2025-40139 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablesmc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
CVE-2025-40135 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableipv6: use RCU in ip6_xmit()
CVE-2025-60876 ↗azl3 busybox 1.36.1-19 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableBusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).
CVE-2025-12863 ↗cbl2 libxml2 2.10.4-9 on CBL Mariner 2.0ImportantNot availableMicrosoft rating unavailableLibxml2: namespace use-after-free in xmlsettreedoc() function of libxml2
CVE-2025-52881 ↗cbl2 moby-runc 1.1.9-9 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailablerunc: LSM labels can be bypassed with malicious config using dummy procfs files
CVE-2025-52565 ↗azl3 kubernetes 1.30.10-14 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablecontainer escape due to /dev/console mount and related races
CVE-2025-31133 ↗cbl2 moby-runc 1.1.9-9 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailablerunc container escape via "masked path" abuse due to mount race conditions
CVE-2024-25621 ↗cbl2 moby-containerd 1.6.26-12 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailablecontainerd affected by a local privilege escalation via wide permissions on CRI directory
CVE-2025-40213 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
CVE-2025-66221 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableWerkzeug safe_join() allows Windows special device names
CVE-2025-61915 ↗azl3 cups 2.4.13-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOpenPrinting CUPS vulnerable to stack based out-of-bound write
CVE-2025-58436 ↗azl3 cups 2.4.13-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack
CVE-2025-66030 ↗cbl2 reaper 3.1.1-19 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenode-forge ASN.1 OID Integer Truncation
CVE-2025-64713 ↗cbl2 fluent-bit 3.0.6-4 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableWebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode
CVE-2025-64704 ↗cbl2 fluent-bit 3.0.6-4 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableWebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction
CVE-2025-12969 ↗cbl2 fluent-bit 3.0.6-4 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableCVE-2025-12969
CVE-2025-64506 ↗azl3 libpng 1.6.40-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images
CVE-2025-64505 ↗azl3 libpng 1.6.40-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index
CVE-2025-11936 ↗azl3 mariadb 10.11.11-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePotential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello
CVE-2025-11935 ↗azl3 mariadb 10.11.11-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableForward Secrecy Violation in WolfSSL TLS 1.3
CVE-2025-40210 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRevert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"
CVE-2025-13193 ↗azl3 libvirt 10.0.0-5 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibvirt: information disclosure via world-readable vm snapshots
CVE-2025-11230 ↗cbl2 haproxy 2.4.24-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableDenial of service vulnerability in HAProxy mjson library
CVE-2025-54770 ↗cbl2 grub2 2.06-15 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGrub2: use-after-free in net_set_vlan
CVE-2025-54771 ↗cbl2 grub2 2.06-15 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGrub2: use-after-free in grub_file_close()
CVE-2025-61664 ↗cbl2 grub2 2.06-15 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGrub2: missing unregister call for normal_exit command may lead to use-after-free
CVE-2025-61661 ↗cbl2 grub2 2.06-15 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGrub2: grub2: out-of-bounds write via malicious usb device
CVE-2025-61663 ↗cbl2 grub2 2.06-15 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGrub2: missing unregister call for normal commands may lead to use-after-free
CVE-2025-61662 ↗cbl2 grub2 2.06-15 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGrub2: missing unregister call for gettext command may lead to use-after-free
CVE-2025-13120 ↗cbl2 rust 1.72.0-11 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemruby array.c sort_cmp use after free
CVE-2025-10158 ↗azl3 rsync 3.4.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRsync: Out of bounds array access via negative index
CVE-2025-12748 ↗azl3 libvirt 10.0.0-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibvirt: denial of service in xml parsing
CVE-2025-12818 ↗azl3 rust 1.90.0-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePostgreSQL libpq undersizes allocations, via integer wraparound
CVE-2025-40202 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipmi: Rework user message limit handling
CVE-2025-40193 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablextensa: simdisk: add input size check in proc_write_simdisk
CVE-2025-40192 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRevert "ipmi: fix msg stack when IPMI is disconnected"
CVE-2025-40197 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: mc: Clear minor number before put device
CVE-2025-40206 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nft_objref: validate objref and objrefmap expressions
CVE-2025-40194 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
CVE-2025-40178 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepid: Add a judgment for ns null in pid_nr_ns
CVE-2025-40188 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepwm: berlin: Fix wrong register in suspend/resume
CVE-2025-40187 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
CVE-2025-40195 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemount: handle NULL values in mnt_ns_release()
CVE-2025-40200 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSquashfs: reject negative file sizes in squashfs_read_inode()
CVE-2025-40207 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
CVE-2025-40180 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
CVE-2025-40179 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: verify orphan file size is not too big
CVE-2011-10034 ↗azl3 autogen 5.18.16-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS
CVE-2025-40158 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipv6: use RCU in ip6_output()
CVE-2025-40173 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/ip6_tunnel: Prevent perpetual tunnel growth
CVE-2025-40168 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
CVE-2025-40164 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusbnet: Fix using smp_processor_id() in preemptible code warnings
CVE-2025-40146 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableblk-mq: fix potential deadlock while nr_requests grown
CVE-2025-40167 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: detect invalid INLINE_DATA + EXTENTS flag combination
CVE-2025-40136 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: hisilicon/qm - request reserved interrupt for virtual function
CVE-2025-40111 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/vmwgfx: Fix Use-after-free in validation
CVE-2025-40110 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/vmwgfx: Fix a null-ptr access in the cursor snooper
CVE-2025-12875 ↗azl3 nghttp2 1.61.0-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablemruby array.c ary_fill_exec out-of-bounds write
CVE-2025-60753 ↗azl3 libarchive 3.7.7-3 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableAn issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).
CVE-2025-40109 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: rng - Ensure set_ent is always present
CVE-2025-64437 ↗cbl2 kubevirt 0.59.0-30 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
CVE-2025-64435 ↗azl3 kubevirt 1.5.0-5 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation
CVE-2025-64433 ↗cbl2 kubevirt 0.59.0-30 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKubeVirt Arbitrary Container File Read
CVE-2025-64434 ↗cbl2 kubevirt 0.59.0-30 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing
CVE-2025-64432 ↗cbl2 kubevirt 0.59.0-30 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer
CVE-2025-64436 ↗cbl2 kubevirt 0.59.0-30 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
CVE-2025-10966 ↗azl3 cmake 3.30.3-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemissing SFTP host verification with wolfSSH
CVE-2025-64329 ↗azl3 containerd2 2.0.0-14 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecontainerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-40107 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecan: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
CVE-2025-2486 ↗cbl2 edk2 20230301gitf80f052277c8-43 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableUEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu
CVE-2025-66382 ↗azl3 expat 2.6.4-2 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableIn libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.
CVE-2025-11932 ↗cbl2 mariadb 10.6.21-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableTiming Side-Channel in PSK Binder Verification
CVE-2025-11933 ↗azl3 mariadb 10.11.11-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableDoS Vulnerability in wolfSSL TLS 1.3 CKS Extension
CVE-2025-12889 ↗azl3 mariadb 10.11.11-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableTLS 1.2 Client Can Downgrade Digest Used
CVE-2025-11934 ↗azl3 mariadb 10.11.11-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableImproper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify
CVE-2025-11931 ↗cbl2 mariadb 10.6.21-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableInteger Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt
CVE-2025-12888 ↗cbl2 mariadb 10.6.21-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableConstant Time Issue with Xtensa-based ESP32 and X22519
CVE-2025-12817 ↗cbl2 postgresql 14.19-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailablePostgreSQL CREATE STATISTICS does not check for schema CREATE privilege
CVE-2025-13224 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13224 Type Confusion in V8
CVE-2025-13042 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13042 Inappropriate implementation in V8
CVE-2025-12729 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-12729 Inappropriate implementation in Omnibox
CVE-2025-12728 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-12728 Inappropriate implementation in Omnibox
CVE-2025-12727 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-12727 Inappropriate implementation in V8
CVE-2025-12726 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-12726 Inappropriate implementation in Views.
CVE-2025-12725 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-12725 Out of bounds write in WebGPU

Glossary