Vulnerabilities
December 2025 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 1 vulnerability with exploitation detected in the wild this month. This defender-focused view covers 349 vulnerabilities across 349 returned patch records from 1 vendor. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 2 of 2 · records 201 to 349 of 349
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2025-68309 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI/AER: Fix NULL pointer access by aer_info
CVE-2025-68317 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableio_uring/zctx: check chained notif contexts
CVE-2025-68288 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: storage: Fix memory leak in USB bulk transport
CVE-2025-68313 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86/CPU/AMD: Add RDSEED fix for Zen5
CVE-2025-68295 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb: client: fix memory leak in cifs_construct_tcon()
CVE-2025-68286 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Check NULL before accessing
CVE-2025-68322 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableparisc: Avoid crash due to unaligned access in unwinder
CVE-2025-68282 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: gadget: udc: fix use-after-free in usb_gadget_state_work
CVE-2025-67897 ↗azl3 kata-containers-cc 3.15.0.aks0-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.
CVE-2025-68258 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecomedi: multiq3: sanitize config options in multiq3_attach()
CVE-2025-68217 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: pegasus-notetaker - fix potential out-of-bounds access
CVE-2025-68281 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list
CVE-2025-68233 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/tegra: Add call to put_pid()
CVE-2025-68222 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
CVE-2025-68220 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
CVE-2025-68209 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemlx5: Fix default values in create CQ
CVE-2025-68257 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecomedi: check device's attached status in compat ioctls
CVE-2025-68239 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebinfmt_misc: restore write access before closing files opened by open_exec()
CVE-2025-68259 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
CVE-2025-68236 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)
CVE-2025-40355 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesysfs: check visibility before changing group attribute ownership
CVE-2025-68175 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: nxp: imx8-isi: Fix streaming cleanup on release
CVE-2025-68204 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepmdomain: arm: scmi: Fix genpd leak on provider registration failure
CVE-2025-68214 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletimers: Fix NULL function pointer race in timer_shutdown_sync()
CVE-2025-68229 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
CVE-2025-68219 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecifs: fix memory leak in smb3_fs_context_parse_param error path
CVE-2025-68264 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: refresh inline data size before write operations
CVE-2025-68230 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: fix gpu page fault after hibernation on PF passthrough
CVE-2025-68263 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableksmbd: ipc: fix use-after-free in ipc_msg_send_request
CVE-2025-40354 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: increase max link count and fix link->enc NULL pointer access
CVE-2025-68198 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrash: fix crashkernel resource shrink
CVE-2025-68201 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: remove two invalid BUG_ON()s
CVE-2025-68203 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: fix lock warning in amdgpu_userq_fence_driver_process
CVE-2025-68223 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/radeon: delete radeon_fence_process in is_signaled, no deadlock
CVE-2025-68211 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableksm: use range-walk function to jump over holes in scan_get_next_rmap_item
CVE-2025-37731 ↗cbl2 rubygem-elasticsearch 8.3.0-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableElasticsearch Improper Authentication
CVE-2025-13281 ↗azl3 kubernetes 1.30.10-18 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePortworx Half-Blind SSRF in kube-controller-manager
CVE-2025-40345 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: storage: sddr55: Reject out-of-bound new_pba
CVE-2025-14104 ↗cbl2 util-linux 2.37.4-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUtil-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
CVE-2025-14512 ↗cbl2 glib 2.71.0-8 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGlib: integer overflow in glib gio attribute escaping causes heap buffer overflow
CVE-2025-14087 ↗azl3 glib 2.78.6-5 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGlib: glib: buffer underflow in gvariant parser leads to heap corruption
CVE-2025-55753 ↗cbl2 httpd 2.4.65-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache HTTP Server: mod_md (ACME), unintended retry intervals
CVE-2025-62408 ↗azl3 fluent-bit 3.1.10-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablec-ares has a Use After Free vulnerability when connection is cleaned up after error
CVE-2025-40334 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: validate userq buffer virtual address and size
CVE-2025-40337 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: stmmac: Correctly handle Rx checksum offload errors
CVE-2025-40338 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: Intel: avs: Do not share the name pointer between components
CVE-2025-40340 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.
CVE-2025-40333 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix infinite loop in __insert_extent_tree()
CVE-2025-40329 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
CVE-2025-40342 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenvme-fc: use lock accessing port_state and rport state
CVE-2025-40332 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdkfd: Fix mmap write lock not release
CVE-2025-40336 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/gpusvm: fix hmm_pfn_to_map_order() usage
CVE-2025-40328 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb: client: fix potential UAF in smb2_close_cached_fid()
CVE-2025-40339 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: fix nullptr err of vm_handle_moved
CVE-2025-40335 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: validate userq input args
CVE-2025-40331 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesctp: Prevent TOCTOU out-of-bounds write
CVE-2025-40343 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenvmet-fc: avoid scheduling association deletion twice
CVE-2025-40341 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefutex: Don't leak robust_list pointer on exec race
CVE-2025-40324 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableNFSD: Fix crash in nfsd4_read_release()
CVE-2025-40303 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablebtrfs: ensure no dirty metadata is written back for an fs with errors
CVE-2025-40297 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablenet: bridge: fix use-after-free due to MST port state bypass
CVE-2025-40322 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablefbdev: bitblit: bound-check glyph index in bit_putcs*
CVE-2025-40311 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableaccel/habanalabs: support mapping cb with vmalloc-backed coherent memory
CVE-2025-40323 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablefbcon: Set fb_display[i]->mode to NULL when the mode is released
CVE-2025-40310 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableamd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
CVE-2025-40294 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableBluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
CVE-2025-40313 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablentfs3: pretend $Extend records as regular files
CVE-2025-40304 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablefbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
CVE-2025-40301 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableBluetooth: hci_event: validate skb length for unknown CC opcode
CVE-2025-40321 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablewifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
CVE-2025-40317 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableregmap: slimbus: fix bus_context pointer in regmap init calls
CVE-2025-40315 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableusb: gadget: f_fs: Fix epfile null pointer access after ep enable.
CVE-2025-40306 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableorangefs: fix xattr related buffer overflow...
CVE-2025-40292 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablevirtio-net: fix received length check in big packets
CVE-2025-40293 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableiommufd: Don't overflow during division for dirty tracking
CVE-2025-40305 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailable9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
CVE-2025-40309 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableBluetooth: SCO: Fix UAF on sco_conn_free
CVE-2025-40308 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableBluetooth: bcsp: receive data only if registered
CVE-2025-40307 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailableexfat: validate cluster allocation bits of the allocation bitmap
CVE-2023-53749 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateNot availableMicrosoft rating unavailablex86: fix clear_user_rep_good() exception handling annotation
CVE-2025-40282 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: 6lowpan: reset link-local header on ipv6 recv path
CVE-2025-40279 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: sched: act_connmark: initialize struct tc_ife to fix kernel leak
CVE-2025-40283 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
CVE-2025-40286 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb/server: fix possible memory leak in smb2_read()
CVE-2025-40285 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb/server: fix possible refcount leak in smb2_sess_setup()
CVE-2025-40284 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: MGMT: cancel mesh send timer when hdev removed
CVE-2025-40288 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
CVE-2025-40275 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
CVE-2025-40268 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecifs: client: fix memory leak in smb3_fs_context_parse_param
CVE-2025-40278 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
CVE-2025-40289 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
CVE-2025-40287 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableexfat: fix improper check of dentry.stream.valid_size
CVE-2025-40269 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-audio: Fix potential overflow of PCM transfer buffer
CVE-2025-40281 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
CVE-2025-40280 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletipc: Fix use-after-free in tipc_mon_reinit_self().
CVE-2025-40277 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
CVE-2025-40273 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNFSD: free copynotify stateid in nfs4_free_ol_stateid()
CVE-2025-66200 ↗azl3 httpd 2.4.65-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo
CVE-2025-65082 ↗azl3 httpd 2.4.65-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache HTTP Server: CGI environment variable override
CVE-2025-65637 ↗cbl2 influxdb 2.6.1-27 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableA denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.
CVE-2025-12084 ↗cbl2 python3 3.9.19-17 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableQuadratic complexity in node ID cache clearing
CVE-2025-61727 ↗cbl2 golang 1.18.8-10 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x509
CVE-2025-40263 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: cros_ec_keyb - fix an invalid memory access
CVE-2025-40266 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: arm64: Check the untrusted offset in FF-A memory share
CVE-2025-40250 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/mlx5: Clean up only new IRQ glue on request_irq() failure
CVE-2025-40247 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/msm: Fix pgtable prealloc error path
CVE-2025-40253 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailables390/ctcm: Fix double-kfree
CVE-2025-40264 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebe2net: pass wrb_params in case of OS2BMC
CVE-2025-40243 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
CVE-2025-40248 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablevsock: Ignore signal/timeout on connect() if already established
CVE-2025-40252 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
CVE-2025-40259 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: sg: Do not sleep in atomic context
CVE-2025-40254 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: openvswitch: remove never-working support for setting nsh fields
CVE-2025-40245 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenios2: ensure that memblock.current_limit is set when setting pfn limits
CVE-2025-40257 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemptcp: fix a race in mptcp_pm_del_add_timer()
CVE-2025-40261 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
CVE-2025-10543 ↗cbl2 influxdb 2.6.1-24 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to the server (for example, part of an MQTT topic may leak into the message body in a PUBLISH packet).
The issue arises because the length of the data passed in was converted from an int64/int32 (depending upon CPU) to an int16 without checks for overflows. The int16 length was then written, followed by the data (e.g. topic). This meant that when the data (e.g. topic) was over 65535 bytes then the amount of data written exceeds what the length field indicates. This could lead to a corrupt packet, or mean that the excess data leaks into another field (e.g. topic leaks into message body).
CVE-2025-40219 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
CVE-2025-40220 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefuse: fix livelock in synchronous file put from fuseblk workers
CVE-2025-40217 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepidfs: validate extensible ioctls
CVE-2025-40218 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/damon/vaddr: do not repeat pte_offset_map_lock() until success
CVE-2025-40215 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfrm: delete x->tunnel as we delete x
CVE-2025-13836 ↗cbl2 python3 3.9.19-16 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableExcessive read buffering DoS in http.client
CVE-2025-65046 ↗Microsoft Edge for AndroidLowOut-of-band0%Microsoft rating unavailableMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2025-62223 ↗Microsoft Edge (Chromium-based)LowOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) for Mac Spoofing Vulnerability
CVE-2025-61594 ↗azl3 ruby 3.3.5-6 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableURI Credential Leakage Bypass over CVE-2025-27221
CVE-2025-11964 ↗azl3 libpcap 1.10.5-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableOOBW in utf_16le_to_utf_8_truncated() in libpcap
CVE-2025-11961 ↗cbl2 nmap 7.93-3 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableOOBR and OOBW in pcap_ether_aton() in libpcap
CVE-2025-68727 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablentfs3: Fix uninit buffer allocated by __getname()
CVE-2025-13912 ↗cbl2 mariadb 10.6.21-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailablePotential non-constant time compiled code with Clang LLVM
CVE-2025-40353 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablearm64: mte: Do not warn if the page is already tagged in copy_highpage()
CVE-2025-13837 ↗cbl2 python3 3.9.19-16 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableOut-of-memory when loading Plist
CVE-2025-14766 ↗Microsoft Edge (Chromium-based)N/AOut-of-band3%Microsoft rating unavailableChromium: CVE-2025-14766 Use after free in WebGPU
CVE-2025-14765 ↗Microsoft Edge (Chromium-based)N/AOut-of-band3%Microsoft rating unavailableChromium: CVE-2025-14765 Out of bounds read and write in V8
CVE-2025-14373 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-14373 Inappropriate implementation in Toolbar
CVE-2025-14372 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-14372 Use after free in Password Manager
CVE-2025-13640 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13640 Inappropriate implementation in Passwords
CVE-2025-13639 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13639 Inappropriate implementation in WebRTC
CVE-2025-13638 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13638 Use after free in Media Stream
CVE-2025-13637 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13637 Inappropriate implementation in Downloads
CVE-2025-13636 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13636 Inappropriate implementation in Split View
CVE-2025-13635 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13635 Inappropriate implementation in Downloads
CVE-2025-13720 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13720 Bad cast in Loader
CVE-2025-13721 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13721 Race in v8
CVE-2025-13634 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13634 Inappropriate implementation in Downloads
CVE-2025-13633 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13633 Use after free in Digital Credentials
CVE-2025-13632 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13632 Inappropriate implementation in DevTools
CVE-2025-13631 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13631 Inappropriate implementation in Google Updater
CVE-2025-13630 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2025-13630 Type Confusion in V8
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.