Browse CVEs

HIGH 7.8 CVE-2025-21896 In the Linux kernel, the following vulnerability has been resolved: fuse: revert back to __readahead_folio() for readahead In commit 3eab9d7bc2f4 (… Linux Kernel 6.13.6+ Fix from $1,9502025-04-01 MEDIUM 6.5 CVE-2025-3028 JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox … Firefox 115.22.0 / 128.9.0+ Fix from $1,6002025-04-01 HIGH 8.1 CVE-2025-3030 Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory co… Firefox 128.8.0 / 136.0+ Fix from $1,9502025-04-01 HIGH 7.8 CVE-2025-21893 In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in key_put() Once a key's reference count has been reduced to 0, … Linux Kernel 6.12.21 / 6.13.9+ Fix from $1,9502025-03-31 MEDIUM 5.3 CVE-2025-2913 A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this issue is the function H5FL__blk_gc_list of the file s… Hdf5 2.0.0+ Fix from $1,6002025-03-28 HIGH 7.8 CVE-2025-30232 A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges. Exim after 4.98.1 Fix from $1,9502025-03-28 HIGH 7.8 CVE-2023-53021 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: fix possible use-after-free syzbot reported a nasty cras… Linux Kernel 5.4.231 / 5.10.166+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2023-53023 In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in local_cleanup() Fix a use-after-free that occur… Linux Kernel 4.14.305 / 4.19.272+ Fix from $1,9502025-03-27 MEDIUM 5.5 CVE-2023-53016 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix possible deadlock in rfcomm_sk_state_change syzbot reports a pos… Linux Kernel 5.15.91 / 6.1.9+ Fix from $1,6002025-03-27 HIGH 7.8 CVE-2023-53003 In the Linux kernel, the following vulnerability has been resolved: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info The me… Linux Kernel 5.4.231 / 5.10.166+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2023-52999 In the Linux kernel, the following vulnerability has been resolved: net: fix UaF in netns ops registration error path If net_assign_generic() fails… Linux Kernel 4.19.272 / 5.4.231+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2023-52983 In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for bfqq in bic_set_bfqq() After commit 64dc8c732f5c ("bloc… Linux Kernel 5.15.93 / 6.1.11+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2023-52973 In the Linux kernel, the following vulnerability has been resolved: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF After… Linux Kernel 4.14.329 / 4.19.273+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2023-52974 In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If dur… Linux Kernel 4.14.306 / 4.19.273+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2023-52975 In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress Bug r… Linux Kernel 5.10.248 / 5.15.93+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2023-52935 In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix ->anon_vma race If an ->anon_vma is attached to the VMA, col… Debian Linux 5.4.299 / 5.10.243+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2023-52931 In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid potential vm use-after-free Adding the vm to the vm_xa table ma… Linux Kernel 6.1.11+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2022-49761 In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in run_one_delayed_ref() Currently we have a btrfs_d… Linux Kernel 5.10.165 / 5.15.90+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2022-49753 In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of client_count in dma_chan_get() The first tim… Linux Kernel 4.14.305 / 4.19.272+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2022-49755 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait While performing fast… Linux Kernel 4.14.305 / 4.19.272+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2025-21883 In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF in error path If ice_ena_vfs() fails after calling i… Linux Kernel 6.6.81 / 6.12.18+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2025-21887 In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The iss… Linux Kernel 5.11 / 5.15.179+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2025-21879 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on inode when scanning root during em shrinking At bt… Linux Kernel 6.13.6+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2025-21867 In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a … Linux Kernel 6.1.130 / 6.6.80+ Fix from $1,9502025-03-27 HIGH 7.8 CVE-2025-2532 Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary … Keyshot Mitigation only Fix from $1,9502025-03-25 HIGH 7.8 CVE-2025-0835 Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. Mitigation only Fix from $1,9502025-03-24 HIGH 8.8 CVE-2025-2476 Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 134.0.6998.117+ Fix from $1,9502025-03-19 HIGH 7.8 CVE-2023-52927 In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_c… Linux Kernel 6.1.130 / 6.6+ Fix from $1,9502025-03-14 HIGH 7.8 CVE-2024-55549 xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. Libxslt 1.1.43+ Fix from $1,9502025-03-14 HIGH 7.8 CVE-2025-24855 numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restore… Libxslt 1.1.43+ Fix from $1,9502025-03-14