PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 72

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 72 / 82

  1. CVE-2025-13609keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration
  2. CVE-2025-13601glib: Integer overflow in in g_escape_uri_string()
  3. CVE-2025-13502webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS
  4. CVE-2025-13499wireshark: Access of Uninitialized Pointer in Wireshark
  5. CVE-2025-13470RNP: RNP: Confidentiality compromise due to uninitialized symmetric session key in Public-Key Encrypted Session Key (PKESK) packets
  6. CVE-2025-13466body-parser: body-parser denial of service
  7. CVE-2025-13465lodash: prototype pollution in _.unset and _.omit functions
  8. CVE-2025-13462cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues
  9. CVE-2025-13204expr-eval: expr-eval: Prototype Pollution
  10. CVE-2025-13193libvirt: Information disclosure via world-readable VM snapshots
  11. CVE-2025-13151libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string
  12. CVE-2025-13034curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation
  13. CVE-2025-13027firefox: Memory safety bugs fixed in Firefox 145 and Thunderbird 145
  14. CVE-2025-13026firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
  15. CVE-2025-13025firefox: Incorrect boundary conditions in the Graphics: WebGPU component
  16. CVE-2025-13024firefox: JIT miscompilation in the JavaScript Engine: JIT component
  17. CVE-2025-13023firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component
  18. CVE-2025-13022firefox: Incorrect boundary conditions in the Graphics: WebGPU component
  19. CVE-2025-13021firefox: Incorrect boundary conditions in the Graphics: WebGPU component
  20. CVE-2025-13020firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component
  21. CVE-2025-13019firefox: thunderbird: Same-origin policy bypass in the DOM: Workers component
  22. CVE-2025-13018firefox: thunderbird: Mitigation bypass in the DOM: Security component
  23. CVE-2025-13017firefox: thunderbird: Same-origin policy bypass in the DOM: Notifications component
  24. CVE-2025-13016firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component
  25. CVE-2025-13015firefox: thunderbird: Spoofing issue in Firefox
  26. CVE-2025-13014firefox: thunderbird: Use-after-free in the Audio/Video component
  27. CVE-2025-13013firefox: thunderbird: Mitigation bypass in the DOM: Core & HTML component
  28. CVE-2025-13012firefox: thunderbird: Race condition in the Graphics component
  29. CVE-2025-12840OpenEXR: OpenEXR: Remote Code Execution via EXR file parsing heap-based buffer overflow
  30. CVE-2025-12839OpenEXR: OpenEXR: Remote Code Execution via Heap-based Buffer Overflow in EXR File Parsing
  31. CVE-2025-12818postgresql: libpq: libpq undersizes allocations, via integer wraparound
  32. CVE-2025-12817postgresql: CREATE STATISTICS does not check for schema CREATE privilege
  33. CVE-2025-12816node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications
  34. CVE-2025-12801nfs-utils: rpc.mountd in the nfs-utils privilege escalation
  35. CVE-2025-12781cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars
  36. CVE-2025-12748libvirt: Denial of service in XML parsing
  37. CVE-2025-12744abrt: Command-injection in ABRT leading to local privilege escalation
  38. CVE-2025-12735expr-eval:
  39. CVE-2025-12543undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF
  40. CVE-2025-12495OpenEXR: OpenEXR: Remote Code Execution via malicious EXR file parsing
  41. CVE-2025-12474libjxl: libjxl: Uninitialized memory read in decoder due to incorrect optimization in patch handling
  42. CVE-2025-12464qemu-kvm: Stack buffer overflow in e1000 device via short frames in loopback mode
  43. CVE-2025-12385qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser
  44. CVE-2025-12200dnsmasq: dnsmasq Config File option.c parse_dhcp_opt null pointer dereference
  45. CVE-2025-12198dnsmasq: dnsmasq Config File util.c parse_hex heap-based overflow
  46. CVE-2025-12183lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure
  47. CVE-2025-12141Grafana: Grafana: Information disclosure of secure settings via contact point modification
  48. CVE-2025-12105libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion
  49. CVE-2025-12084cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service
  50. CVE-2025-11965io.vertx/vertx-core: Eclipse Vert.x Access Control Flaw
CVE 2025 document archive — Page 72 | PulseLinux