Browse CVEs

HIGH 7.8 CVE-2022-50421 In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Avoid double destroy of default endpoint The rpmsg_dev_remove() in… Linux Kernel 5.19.17 / 6.0.3+ Fix from $1,9502025-10-01 HIGH 7.8 CVE-2022-50422 In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() When executing SM… Linux Kernel 5.4.220 / 5.10.150+ Fix from $1,9502025-10-01 HIGH 7.8 CVE-2022-50423 In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() There is an u… Linux Kernel 3.11 / 3.13+ Fix from $1,9502025-10-01 HIGH 7.8 CVE-2025-39896 In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery work from being queued during device removal Use d… Linux Kernel 6.12.46 / 6.16.6+ Fix from $1,9502025-10-01 HIGH 7.8 CVE-2025-10994 A weakness has been identified in Open Babel up to 3.1.1. This affects the function GAMESSOutputFormat::ReadMolecule of the file gamessformat.cpp. Th… Open Babel after 3.1.1 Fix from $1,9502025-09-26 HIGH 8.8 CVE-2025-10501 Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 140.0.7339.185+ Fix from $1,9502025-09-24 HIGH 8.8 CVE-2025-10500 Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 140.0.7339.185+ Fix from $1,9502025-09-24 HIGH 7.8 CVE-2025-47327 Memory corruption while encoding the image data. Aqt1000 Firmware No fix yet Fix from $1,9502025-09-24 HIGH 7.8 CVE-2025-27037 Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers. Fastconnect 6800 Firmware Mitigation only Fix from $1,9502025-09-24 HIGH 7.8 CVE-2025-27077 Memory corruption while processing message in guest VM. Qam8255p Firmware No fix yet Fix from $1,9502025-09-24 HIGH 7.8 CVE-2025-47315 Memory corruption while handling repeated memory unmap requests from guest VM. Qam8255p Firmware No fix yet Fix from $1,9502025-09-24 HIGH 7.4 CVE-2025-8410 Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.This issue affects Connext Professional: from 7.… Connext Professional 7.6.0+ Fix from $1,9502025-09-23 HIGH 7.8 CVE-2025-39877 In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->… Linux Kernel 6.1.153 / 6.6.107+ Fix from $1,9502025-09-23 HIGH 7.8 CVE-2025-39881 In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in polling when open file is released A use-after-free (UAF) vu… Linux Kernel 6.1.153 / 6.6.107+ Fix from $1,9502025-09-23 HIGH 7.8 CVE-2025-39882 In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: fix potential OF node use-after-free The for_each_child_of_node()… Linux Kernel 6.6.107 / 6.12.48+ Fix from $1,9502025-09-23 HIGH 7.8 CVE-2025-39871 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The call to idxd_free() introduces a… Linux Kernel 6.2 / 6.6.107+ Fix from $1,9502025-09-23 HIGH 7.8 CVE-2025-39873 In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB can_… Linux Kernel 5.15.194 / 6.1.153+ Fix from $1,9502025-09-23 MEDIUM 5.3 CVE-2025-10824 A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lea… No fix yet Fix from $1,6002025-09-23 MEDIUM 5.1 CVE-2025-25177 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. Mitigation only Fix from $1,6002025-09-22 HIGH 7.8 CVE-2025-39861 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: vhci: Prevent use-after-free by removing debugfs files early Move th… Linux Kernel 6.6.105 / 6.12.46+ Fix from $1,9502025-09-19 HIGH 7.8 CVE-2025-39863 In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work The… Linux Kernel 6.6.105 / 6.12.46+ Fix from $1,9502025-09-19 HIGH 7.8 CVE-2025-39864 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk intr… Linux Kernel 5.4.299 / 5.10.243+ Fix from $1,9502025-09-19 HIGH 7.8 CVE-2025-39866 In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free iss… Linux Kernel 5.10.247 / 5.15.192+ Fix from $1,9502025-09-19 HIGH 7.8 CVE-2025-39854 In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx->in_use in ice_ll_ts_intr Recent versions of the E81… Linux Kernel 6.12.46 / 6.16.6+ Fix from $1,9502025-09-19 HIGH 7.8 CVE-2025-39855 In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx->in_use in ice_ptp_ts_irq The E810 device has suppor… Linux Kernel 6.16.6+ Fix from $1,9502025-09-19 HIGH 7.8 CVE-2025-39859 In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog The ptp_ocp_detac… Linux Kernel 6.16.6+ Fix from $1,9502025-09-19 HIGH 7.8 CVE-2025-39860 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() syzbot reported th… Linux Kernel 4.15 / 4.20+ Fix from $1,9502025-09-19 HIGH 7.0 CVE-2025-59220 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacke… Windows 10 21h2 10.0.19044.6332 / 10.0.19045.6332+ Fix from $1,9502025-09-18 HIGH 7.0 CVE-2025-59215 Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Windows 11 24h2 10.0.26100.6508+ Fix from $1,9502025-09-18 HIGH 7.0 CVE-2025-59216 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized atta… Windows 11 24h2 10.0.26100.6508+ Fix from $1,9502025-09-18