Browse CVEs

HIGH 7.8 CVE-2024-57900 In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nf_register_net_hooks() syzbot found a race in ila_add_… Linux Kernel 5.4.289 / 5.10.233+ Fix from $1,9502025-01-15 HIGH 7.8 CVE-2024-57887 In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533_attach_dsi() The host_node pointer … Linux Kernel 6.1.125 / 6.6.70+ Fix from $1,9502025-01-15 HIGH 7.8 CVE-2024-57892 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv When mounting o… Linux Kernel 6.1.125 / 6.6.70+ Fix from $1,9502025-01-15 HIGH 7.8 CVE-2024-57857 In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Remove direct link to net_device Do not manage a per device direct li… Linux Kernel 6.12.9+ Fix from $1,9502025-01-15 HIGH 7.8 CVE-2024-57795 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Remove the direct link to net_device The similar patch in siw is in t… Linux Kernel 6.12.9+ Fix from $1,9502025-01-15 HIGH 7.8 CVE-2024-57801 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During drive… Linux Kernel 6.6.70 / 6.12.9+ Fix from $1,9502025-01-15 HIGH 7.8 CVE-2025-21366 Microsoft Access Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21372 Microsoft Brokering File System Elevation of Privilege Vulnerability Windows 11 24h2 10.0.25398.1369 / 10.0.26100.2894+ Fix from $1,9502025-01-14 HIGH 8.4 CVE-2025-21362 Microsoft Excel Remote Code Execution Vulnerability 365 Apps 16.0.10416.20047+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21345 Microsoft Office Visio Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21334 KEV Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Windows 10 21h2 10.0.19044.5371 / 10.0.19045.5371+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21335 KEV Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Windows 10 21h2 10.0.19044.5371 / 10.0.19045.5371+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21315 Microsoft Brokering File System Elevation of Privilege Vulnerability Windows 11 24h2 10.0.25398.1369 / 10.0.26100.2894+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21304 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10 1607 10.0.14393.7699 / 10.0.17763.6775+ Fix from $1,9502025-01-14 CRITICAL 9.8 CVE-2025-21307 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2025-21298EPSS 81% Windows OLE Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $2,3002025-01-14 HIGH 8.1 CVE-2025-21295 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2025-21296 BranchCache Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 8.1 CVE-2025-21297 Windows Remote Desktop Services Remote Code Execution Vulnerability Windows Server 2008 10.0.14393.7699 / 10.0.17763.6775+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21281 Microsoft COM for Windows Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 8.1 CVE-2025-21224 Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability Windows 10 21h2 10.0.19044.5371 / 10.0.19045.5371+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2024-57849 In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during sampling CPU hotplug remove hand… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,9502025-01-11 MEDIUM 5.5 CVE-2024-57875 In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk->conv_zones_bitmap Ensure that a disk revalidation chan… Linux Kernel 6.12.5+ Fix from $1,6002025-01-11 HIGH 7.8 CVE-2024-57798 In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() W… Linux Kernel 6.1.123 / 6.6.69+ Fix from $1,9502025-01-11 HIGH 7.8 CVE-2024-50051 In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: Add cancel_work_sync before module remove If we remove the module… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,9502025-01-11 HIGH 7.8 CVE-2024-41149 In the Linux kernel, the following vulnerability has been resolved: block: avoid to reuse `hctx` not removed from cpuhp callback list If the 'hctx'… Linux Kernel Patch available Fix from $1,9502025-01-11 HIGH 7.8 CVE-2024-56772 In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunit_init_suite() In kunit_debugfs_crea… Linux Kernel 6.12.4+ Fix from $1,9502025-01-08 HIGH 7.8 CVE-2023-35685 In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalati… Android No fix yet Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-56434 UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device. Emui Mitigation only Fix from $1,9502025-01-08 MEDIUM 5.3 CVE-2025-0238 Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vuln… Firefox 115.19.0 / 128.6+ Fix from $1,6002025-01-07