Browse CVEs

HIGH 7.8 CVE-2025-38137 In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to… Linux Kernel 6.15.3+ Fix from $1,9502025-07-03 HIGH 7.8 CVE-2025-38141 In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table() returned NULL, dm_put_live_t… Linux Kernel 6.12.34 / 6.15.3+ Fix from $1,9502025-07-03 HIGH 7.8 CVE-2025-38129 In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a ua… Linux Kernel 6.12.34 / 6.15.3+ Fix from $1,9502025-07-03 HIGH 7.8 CVE-2025-38131 In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While ena… Linux Kernel 6.1.142 / 6.6.94+ Fix from $1,9502025-07-03 HIGH 7.8 CVE-2025-38116 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12k_core_init() When the execution of ath12k_core_h… Linux Kernel 6.15.3+ Fix from $1,9502025-07-03 HIGH 7.8 CVE-2025-38117 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Protect mgmt_pending list with its own lock This uses a mutex … Linux Kernel 6.6.94 / 6.12.34+ Fix from $1,9502025-07-03 HIGH 7.8 CVE-2025-38118 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_… Linux Kernel 6.1.142 / 6.6.94+ Fix from $1,9502025-07-03 HIGH 7.8 CVE-2025-38106 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() syzbot r… Linux Kernel 6.12.34 / 6.15.3+ Fix from $1,9502025-07-03 HIGH 7.8 CVE-2025-38109 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a … Linux Kernel 6.6.94 / 6.12.34+ Fix from $1,9502025-07-03 MEDIUM 5.9 CVE-2025-52886 Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits… Poppler 25.06.0+ Fix from $1,6002025-07-02 HIGH 7.8 CVE-2025-38087 In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in taprio_dev_notifier Since taprio’s taprio_dev_… Linux Kernel 6.6.95 / 6.12.35+ Fix from $1,9502025-06-30 CRITICAL 9.8 CVE-2025-0634 Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2. Rlottie Patch available Fix from $2,3002025-06-30 HIGH 7.8 CVE-2025-6856 A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. Th… Hdf5 No fix yet Fix from $1,9502025-06-29 HIGH 8.8 CVE-2025-6706 An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not h… MongoDB 6.0.21 / 7.0.17+ Fix from $1,9502025-06-26 HIGH 7.8 CVE-2025-6661 PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod… Pdf Tools Mitigation only Fix from $1,9502025-06-25 HIGH 7.8 CVE-2025-6640 PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… Pdf Tools Mitigation only Fix from $1,9502025-06-25 HIGH 7.8 CVE-2025-6644 PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… Pdf Tools Mitigation only Fix from $1,9502025-06-25 HIGH 7.8 CVE-2025-6645 PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… Pdf Tools Mitigation only Fix from $1,9502025-06-25 MEDIUM 5.4 CVE-2025-6555 Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 138.0.7204.49+ Fix from $1,6002025-06-24 CRITICAL 9.8 CVE-2025-6424 A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox… Firefox 115.25.0 / 128.12.0+ Fix from $2,3002025-06-24 HIGH 8.2 CVE-2025-48945 pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronousl… Patch available Fix from $1,9502025-06-20 MEDIUM 5.5 CVE-2025-49014 jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_strflocaltime of /src/builtin.… Patch available Fix from $1,6002025-06-19 HIGH 8.8 CVE-2025-6192 Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 137.0.7151.119+ Fix from $1,9502025-06-18 HIGH 7.8 CVE-2022-50229 In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix a UAF bug on the error path of probing When the driver fails… Linux Kernel 4.9.326 / 4.14.291+ Fix from $1,9502025-06-18 HIGH 7.8 CVE-2022-50212 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not allow CHAIN_ID to refer to another table When doin… Linux Kernel 5.10.137 / 5.15.61+ Fix from $1,9502025-06-18 HIGH 7.8 CVE-2022-50213 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not allow SET_ID to refer to another table When doing … Linux Kernel 4.19.256 / 5.4.211+ Fix from $1,9502025-06-18 HIGH 7.8 CVE-2022-50214 In the Linux kernel, the following vulnerability has been resolved: coresight: Clear the connection field properly coresight devices track their co… Linux Kernel 5.4.211 / 5.10.137+ Fix from $1,9502025-06-18 HIGH 7.8 CVE-2022-50219 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix KASAN use-after-free Read in compute_effective_progs Syzbot found a Us… Linux Kernel 5.10.138 / 5.15.61+ Fix from $1,9502025-06-18 HIGH 7.8 CVE-2022-50220 In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnet_… Linux Kernel 4.9.326 / 4.14.291+ Fix from $1,9502025-06-18 HIGH 7.8 CVE-2022-50190 In the Linux kernel, the following vulnerability has been resolved: spi: Fix simplification of devm_spi_register_controller This reverts commit 59e… Linux Kernel 5.15.61 / 5.18.18+ Fix from $1,9502025-06-18