Vulnerabilities
December 2025 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 1 vulnerability with exploitation detected in the wild this month. This defender-focused view covers 349 vulnerabilities across 349 returned patch records from 1 vendor. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 2 of 2 · records 201 to 349 of 349
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2025-68378 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Fix stackmap overflow check in __bpf_get_stackid()
CVE-2025-68364 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
CVE-2025-68363 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Check skb->transport_header is set in bpf_skb_check_mtu
CVE-2025-68740 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableima: Handle error code returned by ima_filter_rule_match()
CVE-2023-54082 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableaf_unix: Fix null-ptr-deref in unix_stream_sendpage().
CVE-2025-68358 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix racy bitfield write in btrfs_clear_space_info_full()
CVE-2025-68372 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenbd: defer config put in recv_work
CVE-2025-68728 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablentfs3: fix uninit memory after failed mi_read in mi_format_new
CVE-2025-68725 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Do not let BPF test infra emit invalid GSO types to stack
CVE-2025-68365 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefs/ntfs3: Initialize allocated memory before use
CVE-2025-68742 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Fix invalid prog->stats access when update_effective_progs fails
CVE-2025-68356 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegfs2: Prevent recursive memory reclaim
CVE-2025-68344 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: wavefront: Fix integer overflow in sample size validation
CVE-2025-68744 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Free special fields when update [lru_,]percpu_hash maps
CVE-2025-68366 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenbd: defer config unlock in nbd_genl_connect
CVE-2025-68357 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiomap: allocate s_dio_done_wq for async reads as well
CVE-2023-54161 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableaf_unix: Fix null-ptr-deref in unix_stream_sendpage().
CVE-2025-68732 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegpu: host1x: Fix race in syncpt alloc/free
CVE-2025-68345 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
CVE-2025-68362 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
CVE-2025-68354 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableregulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
CVE-2025-68371 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: smartpqi: Fix device resources accessed after device removal
CVE-2025-68343 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecan: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header
CVE-2025-68340 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableteam: Move team device type change at the end of team_port_add
CVE-2025-68342 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecan: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
CVE-2025-68338 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: dsa: microchip: Don't free uninitialized ksz_irq
CVE-2025-68339 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableatm/fore200e: Fix possible data race in fore200e_open()
CVE-2025-68334 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableplatform/x86/amd/pmc: Add support for Van Gogh SoC
CVE-2025-68328 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefirmware: stratix10-svc: fix bug in saving controller data
CVE-2025-68330 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: accel: bmc150: Fix irq assumption regression
CVE-2025-68333 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesched_ext: Fix possible deadlock in the deferred_irq_workfn()
CVE-2025-68327 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: renesas_usbhs: Fix synchronous external abort on unbind
CVE-2025-68335 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecomedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
CVE-2025-68332 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecomedi: c6xdigio: Fix invalid PNP driver unregistration
CVE-2025-68114 ↗azl3 rust 1.75.0-22 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableCapstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
CVE-2025-68161 ↗azl3 javapackages-bootstrap 1.14.0-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache Log4j Core: Missing TLS hostname verification in Socket appender
CVE-2025-59529 ↗cbl2 avahi 0.8-4 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesimple protocol server ignores accepts unlimited connections and logs failures without limit
CVE-2025-68384 ↗cbl2 rubygem-elasticsearch 8.3.0-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableElasticsearch Allocation of Resources Without Limits or Throttling
CVE-2025-68390 ↗cbl2 rubygem-elasticsearch 8.3.0-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableElasticsearch Allocation of Resources Without Limits or Throttling
CVE-2025-68324 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: imm: Fix use-after-free bug caused by unfinished delayed work
CVE-2025-68146 ↗azl3 python-filelock 3.14.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefilelock has TOCTOU race condition that allows symlink attacks during lock file creation
CVE-2025-68289 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: gadget: f_eem: Fix memory leak in eem_unwrap
CVE-2025-68296 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
CVE-2025-68308 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecan: kvaser_usb: leaf: Fix potential infinite loop in command parsers
CVE-2025-68318 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableclk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL
CVE-2025-68309 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI/AER: Fix NULL pointer access by aer_info
CVE-2025-68288 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: storage: Fix memory leak in USB bulk transport
CVE-2025-68295 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb: client: fix memory leak in cifs_construct_tcon()
CVE-2025-68322 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableparisc: Avoid crash due to unaligned access in unwinder
CVE-2025-68282 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: gadget: udc: fix use-after-free in usb_gadget_state_work
CVE-2025-67897 ↗azl3 kata-containers-cc 3.15.0.aks0-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.
CVE-2025-68258 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecomedi: multiq3: sanitize config options in multiq3_attach()
CVE-2025-68217 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: pegasus-notetaker - fix potential out-of-bounds access
CVE-2025-68281 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list
CVE-2025-68233 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/tegra: Add call to put_pid()
CVE-2025-68222 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
CVE-2025-68220 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
CVE-2025-68209 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemlx5: Fix default values in create CQ
CVE-2025-68257 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecomedi: check device's attached status in compat ioctls
CVE-2025-68239 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebinfmt_misc: restore write access before closing files opened by open_exec()
CVE-2025-68259 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
CVE-2025-68236 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)
CVE-2025-40355 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesysfs: check visibility before changing group attribute ownership
CVE-2025-68204 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepmdomain: arm: scmi: Fix genpd leak on provider registration failure
CVE-2025-68214 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletimers: Fix NULL function pointer race in timer_shutdown_sync()
CVE-2025-68229 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
CVE-2025-68219 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecifs: fix memory leak in smb3_fs_context_parse_param error path
CVE-2025-68264 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: refresh inline data size before write operations
CVE-2025-68230 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: fix gpu page fault after hibernation on PF passthrough
CVE-2025-68198 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrash: fix crashkernel resource shrink
CVE-2025-68201 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: remove two invalid BUG_ON()s
CVE-2025-68203 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: fix lock warning in amdgpu_userq_fence_driver_process
CVE-2025-68223 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/radeon: delete radeon_fence_process in is_signaled, no deadlock
CVE-2025-68211 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableksm: use range-walk function to jump over holes in scan_get_next_rmap_item
CVE-2025-37731 ↗cbl2 rubygem-elasticsearch 8.3.0-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableElasticsearch Improper Authentication
CVE-2025-13281 ↗azl3 kubernetes 1.30.10-18 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePortworx Half-Blind SSRF in kube-controller-manager
CVE-2025-40345 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: storage: sddr55: Reject out-of-bound new_pba
CVE-2025-14104 ↗cbl2 util-linux 2.37.4-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUtil-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
CVE-2025-14512 ↗cbl2 glib 2.71.0-8 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGlib: integer overflow in glib gio attribute escaping causes heap buffer overflow
CVE-2025-14087 ↗azl3 glib 2.78.6-5 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGlib: glib: buffer underflow in gvariant parser leads to heap corruption
CVE-2025-62408 ↗azl3 fluent-bit 3.1.10-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablec-ares has a Use After Free vulnerability when connection is cleaned up after error
CVE-2025-40338 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: Intel: avs: Do not share the name pointer between components
CVE-2025-40340 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.
CVE-2025-40333 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix infinite loop in __insert_extent_tree()
CVE-2025-40329 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
CVE-2025-40332 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdkfd: Fix mmap write lock not release
CVE-2025-40339 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: fix nullptr err of vm_handle_moved
CVE-2025-40335 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: validate userq input args
CVE-2025-40341 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefutex: Don't leak robust_list pointer on exec race
CVE-2025-40311 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableaccel/habanalabs: support mapping cb with vmalloc-backed coherent memory
CVE-2025-40310 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableamd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
CVE-2025-40294 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableBluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
CVE-2025-40313 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablentfs3: pretend $Extend records as regular files
CVE-2025-40321 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablewifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
CVE-2025-40315 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableusb: gadget: f_fs: Fix epfile null pointer access after ep enable.
CVE-2025-40293 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableiommufd: Don't overflow during division for dirty tracking
CVE-2025-40305 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailable9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
CVE-2025-40308 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableBluetooth: bcsp: receive data only if registered
CVE-2023-53749 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablex86: fix clear_user_rep_good() exception handling annotation
CVE-2025-40279 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: sched: act_connmark: initialize struct tc_ife to fix kernel leak
CVE-2025-40286 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb/server: fix possible memory leak in smb2_read()
CVE-2025-40288 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
CVE-2025-40275 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
CVE-2025-40268 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecifs: client: fix memory leak in smb3_fs_context_parse_param
CVE-2025-40278 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
CVE-2025-40289 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
CVE-2025-40287 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableexfat: fix improper check of dentry.stream.valid_size
CVE-2025-40281 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
CVE-2025-66200 ↗azl3 httpd 2.4.65-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo
CVE-2025-65082 ↗azl3 httpd 2.4.65-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache HTTP Server: CGI environment variable override
CVE-2025-12084 ↗cbl2 python3 3.9.19-17 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableQuadratic complexity in node ID cache clearing
CVE-2025-61727 ↗cbl2 golang 1.18.8-10 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x509
CVE-2025-40263 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: cros_ec_keyb - fix an invalid memory access
CVE-2025-40247 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/msm: Fix pgtable prealloc error path
CVE-2025-40264 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebe2net: pass wrb_params in case of OS2BMC
CVE-2025-40259 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: sg: Do not sleep in atomic context
CVE-2025-40254 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: openvswitch: remove never-working support for setting nsh fields
CVE-2025-10543 ↗cbl2 influxdb 2.6.1-24 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to the server (for example, part of an MQTT topic may leak into the message body in a PUBLISH packet).
The issue arises because the length of the data passed in was converted from an int64/int32 (depending upon CPU) to an int16 without checks for overflows. The int16 length was then written, followed by the data (e.g. topic). This meant that when the data (e.g. topic) was over 65535 bytes then the amount of data written exceeds what the length field indicates. This could lead to a corrupt packet, or mean that the excess data leaks into another field (e.g. topic leaks into message body).
CVE-2025-40219 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
CVE-2025-40220 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefuse: fix livelock in synchronous file put from fuseblk workers
CVE-2025-40217 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepidfs: validate extensible ioctls
CVE-2025-40218 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/damon/vaddr: do not repeat pte_offset_map_lock() until success
CVE-2025-13836 ↗cbl2 python3 3.9.19-16 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableExcessive read buffering DoS in http.client
CVE-2025-65046 ↗Microsoft Edge for AndroidLowOut-of-band<1%Microsoft rating unavailableMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2025-62223 ↗Microsoft Edge (Chromium-based)LowOut-of-band<1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) for Mac Spoofing Vulnerability
CVE-2025-61594 ↗azl3 ruby 3.3.5-6 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableURI Credential Leakage Bypass over CVE-2025-27221
CVE-2025-11964 ↗azl3 libpcap 1.10.5-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableOOBW in utf_16le_to_utf_8_truncated() in libpcap
CVE-2025-11961 ↗cbl2 nmap 7.93-3 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableOOBR and OOBW in pcap_ether_aton() in libpcap
CVE-2025-68727 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablentfs3: Fix uninit buffer allocated by __getname()
CVE-2025-13912 ↗cbl2 mariadb 10.6.21-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailablePotential non-constant time compiled code with Clang LLVM
CVE-2025-40353 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablearm64: mte: Do not warn if the page is already tagged in copy_highpage()
CVE-2025-13837 ↗cbl2 python3 3.9.19-16 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableOut-of-memory when loading Plist
CVE-2025-14766 ↗Microsoft Edge (Chromium-based)N/AOut-of-band3%Microsoft rating unavailableChromium: CVE-2025-14766 Use after free in WebGPU
CVE-2025-14765 ↗Microsoft Edge (Chromium-based)N/AOut-of-band3%Microsoft rating unavailableChromium: CVE-2025-14765 Out of bounds read and write in V8
CVE-2025-14373 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-14373 Inappropriate implementation in Toolbar
CVE-2025-14372 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-14372 Use after free in Password Manager
CVE-2025-13640 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13640 Inappropriate implementation in Passwords
CVE-2025-13639 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13639 Inappropriate implementation in WebRTC
CVE-2025-13638 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13638 Use after free in Media Stream
CVE-2025-13637 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13637 Inappropriate implementation in Downloads
CVE-2025-13636 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13636 Inappropriate implementation in Split View
CVE-2025-13635 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13635 Inappropriate implementation in Downloads
CVE-2025-13720 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13720 Bad cast in Loader
CVE-2025-13721 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13721 Race in v8
CVE-2025-13634 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13634 Inappropriate implementation in Downloads
CVE-2025-13633 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableChromium: CVE-2025-13633 Use after free in Digital Credentials
CVE-2025-13632 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13632 Inappropriate implementation in DevTools
CVE-2025-13631 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13631 Inappropriate implementation in Google Updater
CVE-2025-13630 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2025-13630 Type Confusion in V8
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.