Browse CVEs

MEDIUM 5.5 CVE-2025-43284 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7… macOS 13.7.7 / 14.7.7+ Fix from $1,6002025-08-29 HIGH 8.5 CVE-2025-8067 A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loo… Mitigation only Fix from $1,9502025-08-28 CRITICAL 9.1 CVE-2025-58050 The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerabi… Pcre2 Patch available Fix from $2,3002025-08-27 CRITICAL 9.1 CVE-2025-52461 An out-of-bounds read vulnerability exists in the Nex parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A spe… Libbiosig No fix yet Fix from $2,3002025-08-25 HIGH 7.1 CVE-2025-38652 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/012345… Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,9502025-08-22 HIGH 7.1 CVE-2025-38657 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() The "link_… Linux Kernel Patch available Fix from $1,9502025-08-22 HIGH 7.1 CVE-2025-38636 In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors tracepoints with K… Linux Kernel 6.16.1+ Fix from $1,9502025-08-22 CRITICAL 9.8 CVE-2025-29365 spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL. Spim after 9.1.24 Fix from $2,3002025-08-22 HIGH 7.1 CVE-2025-38616 In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS ULP TLS expects that it owns t… Linux Kernel 6.6.103 / 6.12.43+ Fix from $1,9502025-08-22 HIGH 7.1 CVE-2025-38599 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() Fis possible Out-Of-… Linux Kernel 6.15.10 / 6.16.1+ Fix from $1,9502025-08-19 HIGH 7.1 CVE-2025-38592 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv Currently both d… Linux Kernel 6.15.10 / 6.16.1+ Fix from $1,9502025-08-19 HIGH 7.1 CVE-2025-38556 In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot f… Linux Kernel 6.12.46 / 6.15.10+ Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-9136 A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestream_vscanf of the file libretro-common/streams/fil… Retroarch Patch available Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-41392 In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of… Argon 12.2.1204.204+ Fix from $1,9502025-08-18 HIGH 7.1 CVE-2023-3865 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't val… Linux Kernel 5.15.121 / 6.1.36+ Fix from $1,9502025-08-16 HIGH 7.1 CVE-2023-3867EPSS 5% In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2_sess_setup ksmbd does not consider the ca… Linux Kernel 5.15.145 / 6.1.40+ Fix from $1,9502025-08-16 HIGH 7.1 CVE-2025-38529 In the Linux kernel, the following vulnerability has been resolved: comedi: aio_iiro_16: Fix bit shift out of bounds When checking for a supported … Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,9502025-08-16 HIGH 7.1 CVE-2025-38530 In the Linux kernel, the following vulnerability has been resolved: comedi: pcl812: Fix bit shift out of bounds When checking for a supported IRQ n… Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,9502025-08-16 HIGH 7.1 CVE-2025-38502 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an out-of-boun… Linux Kernel 5.0 / 5.15.192+ Fix from $1,9502025-08-16 HIGH 7.8 CVE-2025-5046 A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can l… Advance Steel Mitigation only Fix from $1,9502025-08-15 MEDIUM 6.5 CVE-2023-43683 An issue was discovered in Malwarebytes 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later). A Stack buffer out-of-bounds access exists… Mitigation only Fix from $1,6002025-08-14 HIGH 7.5 CVE-2023-43692 An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later). Out-of-bound reads in strings detec… Mitigation only Fix from $1,9502025-08-14 MEDIUM 5.2 CVE-2023-43694 An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before (and Nebula 2020-10-21 and later). An Out of bounds read in se… Mitigation only Fix from $1,6002025-08-14 MEDIUM 5.5 CVE-2025-54233 Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… Framemaker 2020.9 / 2022.7+ Fix from $1,6002025-08-12 MEDIUM 5.5 CVE-2025-54238 Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitat… Dimension 4.1.4+ Fix from $1,6002025-08-12 MEDIUM 5.5 CVE-2025-54228 InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… Indesign 19.5.5 / 20.5+ Fix from $1,6002025-08-12 MEDIUM 5.5 CVE-2025-54235 Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo… Substance 3d Modeler 1.22.2+ Fix from $1,6002025-08-12 MEDIUM 5.5 CVE-2025-54227 InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… Indesign 19.5.5 / 20.5+ Fix from $1,6002025-08-12 MEDIUM 5.5 CVE-2025-54214 InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… Indesign 19.5.5 / 20.5+ Fix from $1,6002025-08-12 MEDIUM 5.5 CVE-2025-54203 Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo… Substance 3d Modeler 1.22.2+ Fix from $1,6002025-08-12