CVE 2025 document archive · 20

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 20 / 82

951. CVE-2025-43501webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
952. CVE-2025-43480webkitgtk: A malicious website may exfiltrate data cross-origin→
953. CVE-2025-43458webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
954. CVE-2025-43457webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
955. CVE-2025-43443webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
956. CVE-2025-43441webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
957. CVE-2025-43440webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
958. CVE-2025-43438webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
959. CVE-2025-43434webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
960. CVE-2025-43433webkitgtk: Processing maliciously crafted web content may lead to memory corruption→
961. CVE-2025-43432webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
962. CVE-2025-43431webkitgtk: Processing maliciously crafted web content may lead to memory corruption→
963. CVE-2025-43430webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
964. CVE-2025-43429webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
965. CVE-2025-43427webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
966. CVE-2025-43425webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
967. CVE-2025-43421webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
968. CVE-2025-43419webkitgtk: Processing maliciously crafted web content may lead to memory corruption→
969. CVE-2025-43392webkitgtk: A website may exfiltrate image data cross-origin→
970. CVE-2025-43368webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
971. CVE-2025-43356webkitgtk: A website may be able to access sensor information without user consent→
972. CVE-2025-43343webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
973. CVE-2025-43342webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
974. CVE-2025-43272webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
975. CVE-2025-43265webkitgtk: Processing maliciously crafted web content may disclose internal states of the app→
976. CVE-2025-43240webkitgtk: A download’s origin may be incorrectly associated→
977. CVE-2025-43228webkitgtk: Visiting a malicious website may lead to address bar spoofing→
978. CVE-2025-43227webkitgtk: Processing maliciously crafted web content may disclose sensitive user information→
979. CVE-2025-43216webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
980. CVE-2025-43214webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
981. CVE-2025-43213webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
982. CVE-2025-43212webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
983. CVE-2025-43211webkitgtk: Processing web content may lead to a denial-of-service→
984. CVE-2025-43023hplip: HP Linux Imaging and Printing Software - Use of DSA Key→
985. CVE-2025-41254org.springframework/spring-core: Spring Framework STOMP CSRF Vulnerability→
986. CVE-2025-41249org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability→
987. CVE-2025-41244open-vm-tools: Local privilege escalation in open-vm-tools→
988. CVE-2025-41242org.springframework/spring-webmvc: Spring Framework MVC path traversal vulnerability→
989. CVE-2025-41234springframework: Reflected download attack in Spring Framework with non-ASCII headers→
990. CVE-2025-41118pyroscope: sensitive COS SecretKey exposed in plaintext via configuration API due to missing type protection→
991. CVE-2025-41117github.com/grafana/grafana: Cross site scripting in Grafana Explore stack trace→
992. CVE-2025-41115grafana: Incorrect Privilege Assignment→
993. CVE-2025-40928JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON→
994. CVE-2025-40918authen-sasl: Authen::SASL::Perl::DIGEST_MD5 insecure cnonce generation→
995. CVE-2025-40909perl: Perl threads have a working directory race condition where file operations may target unintended paths→
996. CVE-2025-40908yaml-libyaml: LibYAML Perl File Modification Vulnerability→
997. CVE-2025-40907perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library→
998. CVE-2025-40780bind: Cache poisoning due to weak PRNG→
999. CVE-2025-40778bind: Cache poisoning attacks with unsolicited RRs→
1000. CVE-2025-40777bind: bind assertion failure→