CYBERSECURITYTRACKER
Vulnerabilities

December 2025 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 1 vulnerability with exploitation detected in the wild this month. This defender-focused view covers 349 vulnerabilities across 349 returned patch records from 1 vendor. Filter the complete month, or browse the static page trail without JavaScript.

349all patch recordsClear filters15criticalShow these records1Microsoft exploitation detectedShow these records2Microsoft in the Known Exploited Vulnerabilities catalogShow these records179tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Microsoft 349

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 1 of 2 · records 1 to 200 of 349

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2025-62221 ↗Windows 10 Version 1809 for 32-bit SystemsImportant3%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2025-14174 ↗Microsoft Edge (Chromium-based)N/AOut-of-band55%Microsoft rating unavailableCISA KEVVulnCheckENISAChromium: CVE-2025-14174 Out of bounds memory access in ANGLE
CVE-2025-64663 ↗Azure Cognitive Service for LanguageCriticalOut-of-band1%Microsoft rates: N/ACustom Question Answering Elevation of Privilege Vulnerability
CVE-2025-64675 ↗Azure Cosmos DBCriticalOut-of-band1%Microsoft rates: N/AAzure Cosmos DB Spoofing Vulnerability
CVE-2025-64676 ↗Microsoft PurviewCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Purview eDiscovery Remote Code Execution Vulnerability
CVE-2025-64677 ↗Office Out-of-Box ExperienceCriticalOut-of-band<1%Microsoft rates: N/AOffice Out-of-Box Experience Spoofing Vulnerability
CVE-2025-65037 ↗Azure Container AppsCriticalOut-of-band1%Microsoft rates: N/AAzure Container Apps Remote Code Execution Vulnerability
CVE-2025-65041 ↗Microsoft Partner CenterCriticalOut-of-band1%Microsoft rating unavailableMicrosoft Partner Center Elevation of Privilege Vulnerability
CVE-2025-68206 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0CriticalOut-of-band1%Microsoft rating unavailable2 mentionsnetfilter: nft_ct: add seqadj extension for natted connections
CVE-2025-62554 ↗Microsoft Office LTSC 2024 for 64-bit editionsCritical<1%Microsoft rates: Exploitation Less LikelyKB5002819Microsoft Office Remote Code Execution Vulnerability
CVE-2025-62557 ↗Microsoft Office LTSC 2024 for 32-bit editionsCritical<1%Microsoft rates: Exploitation Less LikelyKB5002819Microsoft Office Remote Code Execution Vulnerability
CVE-2025-40244 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablehfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
CVE-2025-40242 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablegfs2: Fix unlikely race in gdlm_put_lock
CVE-2025-40262 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableInput: imx_sc_key - fix memory corruption on unload
CVE-2025-68615 ↗cbl2 net-snmp 5.9.4-1 on CBL Mariner 2.0CriticalOut-of-bandNot availableMicrosoft rating unavailableNet-SNMP snmptrapd crash
CVE-2025-68193 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailabledrm/xe/guc: Add devm release action to safely tear down CT
CVE-2025-40251 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailabledevlink: rate: Unset parent pointer in devl_rate_nodes_destroy
CVE-2023-54207 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableHID: uclogic: Correct devm device reference for hidinput input_dev name
CVE-2025-48637 ↗azl3 hyperv-daemons 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableIn multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-34468 ↗azl3 libcap 2.69-10 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablelibcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE
CVE-2025-68973 ↗azl3 gnupg2 2.4.7-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableIn GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)
CVE-2025-13699 ↗azl3 mariadb 10.11.11-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableMariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability
CVE-2025-68476 ↗azl3 keda 2.14.1-7 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableKEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential
CVE-2025-68156 ↗azl3 coredns 1.11.4-11 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableExpr has Denial of Service via Unbounded Recursion in Builtin Functions
CVE-2025-68315 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablef2fs: fix to detect potential corrupted nid in free_nid_list
CVE-2025-68301 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablenet: atlantic: fix fragment overflow handling in RX path
CVE-2025-68304 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableBluetooth: hci_core: lookup hci_conn on RX path on protocol side
CVE-2025-68284 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablelibceph: prevent potential out-of-bounds writes in handle_auth_session_key()
CVE-2025-68303 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableplatform/x86: intel: punit_ipc: fix memory corruption
CVE-2025-68283 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablelibceph: replace BUG_ON with bounds check for map->max_osd
CVE-2025-68285 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablelibceph: fix potential use-after-free in have_mon_and_osd_map()
CVE-2025-2296 ↗azl3 edk2 20240524git3e722403cd16-10 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableUn-verified kernel bypass Secure Boot mechanism in direct boot mode
CVE-2025-68254 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablestaging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
CVE-2025-68256 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablestaging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
CVE-2025-68265 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable2 mentionsnvme: fix admin request_queue lifetime
CVE-2025-68174 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableamd/amdkfd: enhance kfd process check in switch partition
CVE-2025-68261 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailable2 mentionsext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
CVE-2025-40362 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableceph: fix multifs mds auth caps issue
CVE-2025-68255 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablestaging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
CVE-2025-14523 ↗azl3 libsoup 3.4.4-10 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableLibsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)
CVE-2025-58098 ↗azl3 httpd 2.4.65-1 on Azure Linux 3.0ImportantOut-of-band2%Microsoft rating unavailableApache HTTP Server: Server Side Includes adds query string to #exec cmd=...
CVE-2025-66471 ↗cbl2 python-urllib3 1.26.19-2 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableurllib3 Streaming API improperly handles highly compressed data
CVE-2025-66418 ↗cbl2 python-urllib3 1.26.19-2 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableurllib3 allows an unbounded number of links in the decompression chain
CVE-2025-64669 ↗Windows Admin CenterImportant<1%Microsoft rates: Exploitation Less LikelyWindows Admin Center Elevation of Privilege Vulnerability
CVE-2025-40319 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Important<1%Microsoft rating unavailablebpf: Sync pending IRQ work before freeing ring buffer
CVE-2025-54100 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation Less LikelyPublicly disclosedKB5071417KB5071501
and 13 moreKB5071503KB5071504KB5071505KB5071506KB5071507KB5071542KB5071543KB5071544KB5071546KB5071547KB5072033KB5074204KB5074353
PowerShell Remote Code Execution Vulnerability
CVE-2025-55233 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2025-59516 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation More LikelyKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Storage VSP Driver Elevation of Privilege Vulnerability
CVE-2025-59517 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation More LikelyKB5071413KB5071417
and 7 moreKB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Storage VSP Driver Elevation of Privilege Vulnerability
CVE-2025-62454 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant2%Microsoft rates: Exploitation More LikelyKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2025-62455 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071501KB5071503
and 7 moreKB5071504KB5071505KB5071506KB5071507KB5071543KB5071544KB5071546
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2025-62456 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5071413KB5071417
and 4 moreKB5071542KB5071547KB5072014KB5072033
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2025-62457 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2025-62458 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation More LikelyKB5071413KB5071417
and 8 moreKB5071501KB5071503KB5071505KB5071506KB5071543KB5071544KB5071546KB5071547
Win32k Elevation of Privilege Vulnerability
CVE-2025-62461 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2025-62462 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2025-62463 ↗Windows Server 2022Important<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 5 moreKB5071542KB5071546KB5071547KB5072014KB5072033
DirectX Graphics Kernel Denial of Service Vulnerability
CVE-2025-62464 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2025-62465 ↗Windows Server 2022Important<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 4 moreKB5071542KB5071547KB5072014KB5072033
DirectX Graphics Kernel Denial of Service Vulnerability
CVE-2025-62466 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 13 moreKB5071501KB5071503KB5071504KB5071505KB5071506KB5071507KB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Client-Side Caching Elevation of Privilege Vulnerability
CVE-2025-62467 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2025-62468 ↗Windows Server 2025 (Server Core installation)Important1%Microsoft rates: Exploitation More LikelyKB5071417KB5071542
and 2 moreKB5072014KB5072033
Windows Defender Firewall Service Information Disclosure Vulnerability
CVE-2025-62469 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation UnlikelyKB5072014KB5072033Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2025-62470 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation More LikelyKB5071413KB5071417
and 13 moreKB5071501KB5071503KB5071504KB5071505KB5071506KB5071507KB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2025-62472 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation More LikelyKB5071413KB5071417
and 13 moreKB5071501KB5071503KB5071504KB5071505KB5071506KB5071507KB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2025-62473 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 13 moreKB5071501KB5071503KB5071504KB5071505KB5071506KB5071507KB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
CVE-2025-62474 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 11 moreKB5071501KB5071503KB5071505KB5071506KB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2025-62549 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 13 moreKB5071501KB5071503KB5071504KB5071505KB5071506KB5071507KB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-62550 ↗Azure Monitor AgentImportant1%Microsoft rates: Exploitation Less LikelyAzure Monitor Agent Remote Code Execution Vulnerability
CVE-2025-62552 ↗Microsoft Office 2019 for 32-bit editionsImportant1%Microsoft rates: Exploitation UnlikelyKB5002812Microsoft Access Remote Code Execution Vulnerability
CVE-2025-62553 ↗Microsoft Office 2019 for 32-bit editionsImportant1%Microsoft rates: Exploitation Less LikelyKB5002818KB5002820Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-62555 ↗Microsoft SharePoint Enterprise Server 2016Important1%Microsoft rates: Exploitation Less LikelyKB5002802KB5002804
and 3 moreKB5002806KB5002816KB5002821
Microsoft Word Remote Code Execution Vulnerability
CVE-2025-62556 ↗Office Online ServerImportant1%Microsoft rates: Exploitation Less LikelyKB5002817KB5002820Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-62558 ↗Microsoft SharePoint Enterprise Server 2016Important1%Microsoft rates: Exploitation Less LikelyKB5002802KB5002804
and 3 moreKB5002806KB5002816KB5002821
Microsoft Word Remote Code Execution Vulnerability
CVE-2025-62559 ↗Microsoft SharePoint Enterprise Server 2016Important1%Microsoft rates: Exploitation Less LikelyKB5002802KB5002804
and 3 moreKB5002806KB5002816KB5002821
Microsoft Word Remote Code Execution Vulnerability
CVE-2025-62560 ↗Office Online ServerImportant1%Microsoft rates: Exploitation UnlikelyKB5002817KB5002820Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-62561 ↗Office Online ServerImportant1%Microsoft rates: Exploitation Less LikelyKB5002817KB5002818
and 1 moreKB5002820
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-62562 ↗Microsoft SharePoint Enterprise Server 2016Important1%Microsoft rates: Exploitation UnlikelyKB5002802KB5002804
and 3 moreKB5002806KB5002816KB5002821
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2025-62563 ↗Office Online ServerImportant1%Microsoft rates: Exploitation Less LikelyKB5002817KB5002818
and 1 moreKB5002820
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-62564 ↗Office Online ServerImportant1%Microsoft rates: Exploitation Less LikelyKB5002817KB5002820Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-62565 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 7 moreKB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows File Explorer Elevation of Privilege Vulnerability
CVE-2025-62567 ↗Windows 10 Version 1809 for x64-based SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5071413KB5071417
and 8 moreKB5071503KB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Hyper-V Denial of Service Vulnerability
CVE-2025-62569 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation Less LikelyKB5071542KB5072014
and 1 moreKB5072033
Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2025-62570 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation Less LikelyKB5072014KB5072033Windows Camera Frame Server Monitor Information Disclosure Vulnerability
CVE-2025-62571 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 13 moreKB5071501KB5071503KB5071504KB5071505KB5071506KB5071507KB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Installer Elevation of Privilege Vulnerability
CVE-2025-62572 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation Less LikelyKB5072014KB5072033Application Information Service Elevation of Privilege Vulnerability
CVE-2025-62573 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 7 moreKB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2025-64658 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows File Explorer Elevation of Privilege Vulnerability
CVE-2025-64661 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 7 moreKB5071542KB5071543KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Shell Elevation of Privilege Vulnerability
CVE-2025-64666 ↗Microsoft Exchange Server 2019 Cumulative Update 15Important1%Microsoft rates: Exploitation Less LikelyKB5071873KB5071874
and 2 moreKB5071875KB5071876
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2025-64667 ↗Microsoft Exchange Server Subscription Edition RTMImportant1%Microsoft rates: Exploitation UnlikelyKB5071873KB5071874
and 2 moreKB5071875KB5071876
Microsoft Exchange Server Spoofing Vulnerability
CVE-2025-64670 ↗Windows Server 2022Important1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 5 moreKB5071542KB5071546KB5071547KB5072014KB5072033
Windows DirectX Information Disclosure Vulnerability
CVE-2025-64671 ↗GitHub Copilot Plugin for JetBrains IDEsImportant<1%Microsoft rates: Exploitation Less LikelyPublicly disclosedGitHub Copilot for Jetbrains Remote Code Execution Vulnerability
CVE-2025-64672 ↗Microsoft SharePoint Server Subscription EditionImportant1%Microsoft rates: Exploitation Less LikelyKB5002815Microsoft SharePoint Server Spoofing Vulnerability
CVE-2025-64673 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5071413KB5071417
and 6 moreKB5071542KB5071544KB5071546KB5071547KB5072014KB5072033
Windows Storage VSP Driver Elevation of Privilege Vulnerability
CVE-2025-64678 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5068779KB5068781
and 13 moreKB5068787KB5068791KB5068840KB5068861KB5068864KB5068865KB5068904KB5068905KB5068906KB5068907KB5068908KB5068909KB5068966
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-64679 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2025-64680 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2025-40272 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemm/secretmem: fix use-after-free race in fault handler
CVE-2025-59775 ↗cbl2 httpd 2.4.65-1 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableApache HTTP Server: NTLM Leakage on Windows through UNC SSRF
CVE-2025-40233 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableocfs2: clear extent cache after moving/defragmenting extents
CVE-2025-40258 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemptcp: fix race condition in mptcp_schedule_work()
CVE-2025-40240 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablesctp: avoid NULL dereference when chunk data buffer is missing
CVE-2025-12385 ↗cbl2 qt5-qtbase 5.12.11-18 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableImproper validation of <img> tag size in Text component parser
CVE-2025-34297 ↗cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableKissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc
CVE-2025-12819 ↗cbl2 pgbouncer 1.24.1-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableUntrusted search path in auth_query connection in PgBouncer
CVE-2025-61729 ↗azl3 golang 1.25.5-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableExcessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-15284 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablearrayLimit bypass in bracket notation allows DoS via memory exhaustion
CVE-2025-14180 ↗cbl2 php 8.1.33-1 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailableNULL Pointer Dereference in PDO quoting
CVE-2025-68380 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablewifi: ath11k: fix peer HE MCS assignment
CVE-2025-68346 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableALSA: dice: fix buffer overflow in detect_stream_formats()
CVE-2025-68367 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablemacintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
CVE-2025-68729 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablewifi: ath12k: Fix MSDU buffer types handling in RX error path
CVE-2025-68331 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableusb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
CVE-2025-68287 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableusb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
CVE-2025-68290 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablemost: usb: fix double free on late probe failure
CVE-2025-68311 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailabletty: serial: ip22zilog: Use platform device for probing
CVE-2025-68307 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablecan: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
CVE-2025-68297 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableceph: fix crash in process_v2_sparse_read() for encrypted directories
CVE-2025-68188 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailabletcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
CVE-2025-68237 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablemtdchar: fix integer overflow in read/write ioctls
CVE-2025-68227 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablemptcp: Fix proto fallback detection with BPF
CVE-2025-68235 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
CVE-2025-68231 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablemm/mempool: fix poisoning order>0 pages with HIGHMEM
CVE-2025-68266 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablebfs: Reconstruct file type when loading from disk
CVE-2025-68196 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Cache streams targeting link when performing LT automation
CVE-2025-68190 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
CVE-2025-68224 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablescsi: core: Fix a regression triggered by scsi_host_busy()
CVE-2025-40314 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantNot availableMicrosoft rating unavailableusb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
CVE-2025-40312 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantNot availableMicrosoft rating unavailablejfs: Verify inode mode when loading from disk
CVE-2025-40223 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablemost: usb: Fix use-after-free in hdm_disconnect
CVE-2025-66476 ↗azl3 vim 9.1.1616-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableVim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability
CVE-2025-66293 ↗cbl2 libpng 1.6.51-1 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailableLIBPNG has an out-of-bounds read in png_image_read_composite
CVE-2025-68724 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailable2 mentionscrypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
CVE-2025-68379 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableRDMA/rxe: Fix null deref on srq->rq.queue after resize failure
CVE-2025-68746 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablespi: tegra210-quad: Fix timeout handling
CVE-2025-68347 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
CVE-2025-68745 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailablescsi: qla2xxx: Clear cmds after chip reset
CVE-2025-68736 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablelandlock: Fix handling of disconnected directories
CVE-2025-68741 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablescsi: qla2xxx: Fix improper freeing of purex item
CVE-2025-68349 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailable2 mentionsNFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
CVE-2025-68336 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablelocking/spinlock/debug: Fix data-race in do_raw_write_lock
CVE-2025-68337 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailable2 mentionsjbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted
CVE-2025-68302 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablenet: sxgbe: fix potential NULL dereference in sxgbe_rx()
CVE-2025-68317 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableio_uring/zctx: check chained notif contexts
CVE-2025-68313 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablex86/CPU/AMD: Add RDSEED fix for Zen5
CVE-2025-68286 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailabledrm/amd/display: Check NULL before accessing
CVE-2025-68175 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablemedia: nxp: imx8-isi: Fix streaming cleanup on release
CVE-2025-68263 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableksmbd: ipc: fix use-after-free in ipc_msg_send_request
CVE-2025-40354 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailabledrm/amd/display: increase max link count and fix link->enc NULL pointer access
CVE-2025-55753 ↗cbl2 httpd 2.4.65-1 on CBL Mariner 2.0ModerateOut-of-band<1%Microsoft rating unavailableApache HTTP Server: mod_md (ACME), unintended retry intervals
CVE-2025-40334 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailabledrm/amdgpu: validate userq buffer virtual address and size
CVE-2025-40337 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablenet: stmmac: Correctly handle Rx checksum offload errors
CVE-2025-40342 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablenvme-fc: use lock accessing port_state and rport state
CVE-2025-40336 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailabledrm/gpusvm: fix hmm_pfn_to_map_order() usage
CVE-2025-40328 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablesmb: client: fix potential UAF in smb2_close_cached_fid()
CVE-2025-40331 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablesctp: Prevent TOCTOU out-of-bounds write
CVE-2025-40343 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailablenvmet-fc: avoid scheduling association deletion twice
CVE-2025-40324 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailableNFSD: Fix crash in nfsd4_read_release()
CVE-2025-40303 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailablebtrfs: ensure no dirty metadata is written back for an fs with errors
CVE-2025-40297 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailablenet: bridge: fix use-after-free due to MST port state bypass
CVE-2025-40322 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailablefbdev: bitblit: bound-check glyph index in bit_putcs*
CVE-2025-40323 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailablefbcon: Set fb_display[i]->mode to NULL when the mode is released
CVE-2025-40304 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailablefbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
CVE-2025-40301 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailableBluetooth: hci_event: validate skb length for unknown CC opcode
CVE-2025-40317 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailableregmap: slimbus: fix bus_context pointer in regmap init calls
CVE-2025-40306 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailableorangefs: fix xattr related buffer overflow...
CVE-2025-40292 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailablevirtio-net: fix received length check in big packets
CVE-2025-40309 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Moderate<1%Microsoft rating unavailableBluetooth: SCO: Fix UAF on sco_conn_free
CVE-2025-40307 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0Moderate<1%Microsoft rating unavailableexfat: validate cluster allocation bits of the allocation bitmap
CVE-2025-40282 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableBluetooth: 6lowpan: reset link-local header on ipv6 recv path
CVE-2025-40283 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableBluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
CVE-2025-40285 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablesmb/server: fix possible refcount leak in smb2_sess_setup()
CVE-2025-40284 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableBluetooth: MGMT: cancel mesh send timer when hdev removed
CVE-2025-40269 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableALSA: usb-audio: Fix potential overflow of PCM transfer buffer
CVE-2025-40280 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailabletipc: Fix use-after-free in tipc_mon_reinit_self().
CVE-2025-40277 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailabledrm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
CVE-2025-40273 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableNFSD: free copynotify stateid in nfs4_free_ol_stateid()
CVE-2025-65637 ↗cbl2 influxdb 2.6.1-27 on CBL Mariner 2.0ModerateOut-of-band1%Microsoft rating unavailableA denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.
CVE-2025-40266 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableKVM: arm64: Check the untrusted offset in FF-A memory share
CVE-2025-40250 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablenet/mlx5: Clean up only new IRQ glue on request_irq() failure
CVE-2025-40253 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailables390/ctcm: Fix double-kfree
CVE-2025-40243 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablehfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
CVE-2025-40248 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablevsock: Ignore signal/timeout on connect() if already established
CVE-2025-40252 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailablenet: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
CVE-2025-40245 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablenios2: ensure that memblock.current_limit is set when setting pfn limits
CVE-2025-40257 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablemptcp: fix a race in mptcp_pm_del_add_timer()
CVE-2025-40261 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailable2 mentionsnvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
CVE-2025-40215 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablexfrm: delete x->tunnel as we delete x
CVE-2025-68251 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableerofs: avoid infinite loops due to corrupted subpage compact indexes
CVE-2025-67873 ↗azl3 rust 1.75.0-22 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableCapstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
CVE-2025-68291 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
CVE-2025-69277 ↗azl3 libsodium 1.0.19-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.
CVE-2025-14178 ↗azl3 php 8.3.23-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHeap buffer overflow in array_merge()
CVE-2025-14177 ↗azl3 php 8.3.23-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInformation Leak of Memory in getimagesize
CVE-2025-68972 ↗cbl2 gnupg2 2.4.0-3 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an "invalid armor" message is printed during verification). This is related to use of \f as a marker to denote truncation of a long plaintext line.
CVE-2023-54061 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86: fix clear_user_rep_good() exception handling annotation
CVE-2025-68733 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmack: fix bug: unprivileged task can create labels
CVE-2025-68374 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemd: fix rcu protection in md_wakeup_thread
CVE-2025-68376 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecoresight: ETR: Fix ETR buffer use-after-free issue

Glossary

Open in glossary