CVE 2025 document archive · 75
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 75 / 82
- CVE-2025-9165libtiff: LibTIFF memory leak
- CVE-2025-9092org.bouncycastle: Bouncycastle Resource Exhaustion
- CVE-2025-9086curl: libcurl: Curl out of bounds read for cookie path
- CVE-2025-8961libtiff: LibTIFF memory corruption
- CVE-2025-8941linux-pam: Incomplete fix for CVE-2025-6020
- CVE-2025-8916org.bouncycastle: BouncyCastle denial of service
- CVE-2025-8901chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability
- CVE-2025-8885bouncycastle: Bouncy Castle denial of service parsing ASN.1 Object Identifiers
- CVE-2025-8869pip: pip missing checks on symbolic link extraction
- CVE-2025-8860qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback
- CVE-2025-8851libtiff: LibTIFF Stack-based buffer overflow
- CVE-2025-8746libopts: Libopts Memory Corruption Vulnerability
- CVE-2025-8732libxml2: libxml2: Uncontrolled Recursion Vulnerability
- CVE-2025-8715postgresql: PostgreSQL executes arbitrary code in restore operation
- CVE-2025-8714postgresql: PostgreSQL code execution in restore operation
- CVE-2025-8713postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
- CVE-2025-8677bind: Resource exhaustion via malformed DNSKEY handling
- CVE-2025-8556github.com/cloudflare/circl: CIRCL-Fourq: Missing and wrong validation can lead to incorrect results
- CVE-2025-8534libtiff: Libtiff Null Pointer Dereference Vulnerability
- CVE-2025-8291cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked
- CVE-2025-8283netavark: podman: netavark may resolve hostnames to unexpected hosts
- CVE-2025-8277libssh: Memory Exhaustion via Repeated Key Exchange in libssh
- CVE-2025-8263prettier: prettier parseNestedCSS ReDoS
- CVE-2025-8225binutils: Binutils DWARF Section Handler Memory Leak
- CVE-2025-8224binutils: Binutils BFD Null Pointer Dereference
- CVE-2025-8194cpython: Cpython infinite loop when parsing a tarfile
- CVE-2025-8177libtiff: LibTIFF Buffer Overflow
- CVE-2025-8176libtiff: LibTIFF Use-After-Free Vulnerability
- CVE-2025-8114libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation
- CVE-2025-8067udisks: Out-of-bounds read in UDisks Daemon
- CVE-2025-8058glibc: Double free in glibc
- CVE-2025-8044firefox: thunderbird: Memory safety bugs fixed in Firefox 141 and Thunderbird 141
- CVE-2025-8043firefox: thunderbird: Incorrect URL truncation
- CVE-2025-8040firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
- CVE-2025-8039firefox: Search terms persisted in URL bar
- CVE-2025-8038firefox: thunderbird: CSP frame-src was not correctly enforced for paths
- CVE-2025-8037firefox: thunderbird: Nameless cookies shadow secure cookies
- CVE-2025-8036firefox: thunderbird: DNS rebinding circumvents CORS
- CVE-2025-8035firefox: thunderbird: Memory safety bugs
- CVE-2025-8034firefox: thunderbird: Memory safety bugs
- CVE-2025-8033firefox: thunderbird: Incorrect JavaScript state machine for generators
- CVE-2025-8032firefox: thunderbird: XSLT documents could bypass CSP
- CVE-2025-8031firefox: thunderbird: Incorrect URL stripping in CSP reports
- CVE-2025-8030firefox: thunderbird: Potential user-assisted code execution in “Copy as cURL” command
- CVE-2025-8029firefox: thunderbird: javascript: URLs executed on object and embed tags
- CVE-2025-8028firefox: thunderbird: Large branch table could lead to truncated instruction
- CVE-2025-8027firefox: thunderbird: JavaScript engine only wrote partial return value to stack
- CVE-2025-7962com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability
- CVE-2025-7783form-data: Unsafe random function in form-data
- CVE-2025-7546binutils: Binutils: Out-of-bounds Write Vulnerability