Browse CVEs

HIGH 7.8 CVE-2021-47634 In the Linux kernel, the following vulnerability has been resolved: ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl Hulk Robot r… Linux Kernel 3.3 / 3.11+ Fix from $1,9502025-02-26 HIGH 7.8 CVE-2021-47639 In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU Zap both vali… Linux Kernel 5.15.33 / 5.16.19+ Fix from $1,9502025-02-26 MEDIUM 6.5 CVE-2024-27246 Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. Workplace Desktop 5.15.17 / 5.16.15+ Fix from $1,6002025-02-25 MEDIUM 6.5 CVE-2024-27239 Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. Workplace Desktop 5.15.17 / 5.16.15+ Fix from $1,6002025-02-25 HIGH 7.8 CVE-2025-26600 A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while th… Enterprise Linux 21.1.16 / 24.1.6+ Fix from $1,9502025-02-25 HIGH 7.8 CVE-2025-26601 A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, chang… Enterprise Linux 21.1.16 / 24.1.6+ Fix from $1,9502025-02-25 HIGH 7.8 CVE-2025-26594 A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root… Enterprise Linux 21.1.16 / 24.1.6+ Fix from $1,9502025-02-25 HIGH 7.8 CVE-2023-52926 In the Linux kernel, the following vulnerability has been resolved: IORING_OP_READ did not correctly consume the provided buffer list when read i/o … Linux Kernel 6.1.122 / 6.6.68+ Fix from $1,9502025-02-24 HIGH 8.8 CVE-2025-1006 Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web… Chrome 133.0.6943.126+ Fix from $1,9502025-02-19 CRITICAL 9.8 CVE-2024-56171 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. … Libxml2 2.12.10 / 2.13.6+ Fix from $2,3002025-02-18 CRITICAL 9.8 CVE-2025-26623 Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow wa… Exiv2 0.28.5+ Fix from $2,3002025-02-18 MEDIUM 6.4 CVE-2025-0622 A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw al… Mitigation only Fix from $1,6002025-02-18 HIGH 7.8 CVE-2025-21703 In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() qdisc_tree_reduce_… Linux Kernel 5.4.291 / 5.10.235+ Fix from $1,9502025-02-18 HIGH 8.8 CVE-2025-0995 Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 133.0.69943.98+ Fix from $1,9502025-02-15 HIGH 8.1 CVE-2025-0997 Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted C… Chrome 133.0.6943.98+ Fix from $1,9502025-02-15 HIGH 7.8 CVE-2025-21700 In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion A… Linux Kernel 5.4.291 / 5.10.235+ Fix from $1,9502025-02-13 HIGH 7.4 CVE-2024-41168 Use after free in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user t… Mitigation only Fix from $1,9502025-02-12 HIGH 7.8 CVE-2024-57951 In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU… Linux Kernel 4.20 / 5.4.290+ Fix from $1,9502025-02-12 HIGH 8.8 CVE-2025-0899 PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code … Pdf Xchange Editor 10.4.1.389+ Fix from $1,9502025-02-11 HIGH 7.8 CVE-2025-21394 Microsoft Excel Remote Code Execution Vulnerability 365 Apps 16.0.10416.20058+ Fix from $1,9502025-02-11 HIGH 7.8 CVE-2025-21397 Microsoft Office Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502025-02-11 HIGH 8.8 CVE-2025-21406 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20915 / 10.0.14393.7785+ Fix from $1,9502025-02-11 HIGH 7.8 CVE-2025-21386 Microsoft Excel Remote Code Execution Vulnerability 365 Apps 16.0.10416.20058+ Fix from $1,9502025-02-11 HIGH 7.8 CVE-2025-21387 Microsoft Excel Remote Code Execution Vulnerability 365 Apps 16.0.10416.20058+ Fix from $1,9502025-02-11 HIGH 7.8 CVE-2025-21392 Microsoft Office Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502025-02-11 HIGH 7.1 CVE-2025-21379 DHCP Client Service Remote Code Execution Vulnerability Windows 11 24h2 10.0.26100.3194+ Fix from $1,9502025-02-11 HIGH 7.8 CVE-2025-21367 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6893 / 10.0.19044.5487+ Fix from $1,9502025-02-11 HIGH 7.8 CVE-2025-21159 Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the con… Illustrator 28.7.4 / 29.2.1+ Fix from $1,9502025-02-11 HIGH 7.8 CVE-2025-21693 In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswap… Linux Kernel 6.12.12+ Fix from $1,9502025-02-10 HIGH 7.8 CVE-2025-0304 in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak throug… Openharmony after 4.1.2 Fix from $1,9502025-02-07