PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 76

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 76 / 82

  1. CVE-2025-7545binutils: Binutils: Heap Buffer Overflow
  2. CVE-2025-7519polkit: XML policy file with a large number of nested elements may lead to out-of-bounds write
  3. CVE-2025-7493FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA
  4. CVE-2025-7458sqlite: SQLite integer overflow
  5. CVE-2025-7425libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  6. CVE-2025-7424libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes
  7. CVE-2025-7345gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf
  8. CVE-2025-7339on-headers: on-headers vulnerable to http response header manipulation
  9. CVE-2025-7039glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()
  10. CVE-2025-6965sqlite: Integer Truncation in SQLite
  11. CVE-2025-6703neqo-transport: neqo-transport panic
  12. CVE-2025-6663gstreamer: GStreamer Code Execution Vulnerability
  13. CVE-2025-6558angle: insufficient input validation can cause undefined behavior
  14. CVE-2025-6547pbkdf2: pbkdf2 silently returns static keys
  15. CVE-2025-6545pbkdf2: pbkdf2 silently returns predictable key material
  16. CVE-2025-6493codemirror: CodeMirror Markdown Regex Complexity Vulnerability
  17. CVE-2025-6491php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
  18. CVE-2025-6442webrick: Ruby WEBrick Request Smuggling Vulnerability
  19. CVE-2025-6436firefox: Memory safety bugs fixed in Firefox 140 and Thunderbird 140
  20. CVE-2025-6435firefox: Save as in Devtools could download files without sanitizing the extension
  21. CVE-2025-6434firefox: HTTPS-Only exception screen lacked anti-clickjacking delay
  22. CVE-2025-6433firefox: WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate
  23. CVE-2025-6432firefox: DNS Requests leaked outside of a configured SOCKS proxy
  24. CVE-2025-6431firefox: The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed
  25. CVE-2025-6430firefox: thunderbird: Content-Disposition header ignored when a file is included in an embed or object tag
  26. CVE-2025-6429firefox: thunderbird: Incorrect parsing of URLs could have allowed embedding of youtube.com
  27. CVE-2025-6428firefox: Firefox for Android opened URLs specified in a link querystring parameter
  28. CVE-2025-6427firefox: connect-src Content Security Policy restriction could be bypassed
  29. CVE-2025-6426firefox: thunderbird: No warning when opening executable terminal files on macOS
  30. CVE-2025-6425firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
  31. CVE-2025-6424firefox: thunderbird: Use-after-free in FontFaceSet
  32. CVE-2025-6395gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()
  33. CVE-2025-6275wabt: WebAssembly wabt use after free
  34. CVE-2025-6274wabt: WebAssembly wabt excess resource consumption
  35. CVE-2025-6273wabt: WebAssembly wabt reachable assertion
  36. CVE-2025-6199gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder
  37. CVE-2025-6197grafana: Open Redirect in Grafana
  38. CVE-2025-6196libgepub: Integer Overflow in libgepub's EPUB Archive Handling
  39. CVE-2025-6176Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS
  40. CVE-2025-6170libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling
  41. CVE-2025-6141gnu-ncurses: ncurses Stack Buffer Overflow
  42. CVE-2025-6120assimp: Open Asset Import Library heap-based overflow
  43. CVE-2025-6119assimp: Open Asset Import Library use after free
  44. CVE-2025-6075python: Quadratic complexity in os.path.expandvars() with user-controlled template
  45. CVE-2025-6069cpython: Python HTMLParser quadratic complexity
  46. CVE-2025-6052glib: Integer overflow in g_string_maybe_expand() leading to potential buffer overflow in GLib GString
  47. CVE-2025-6035gimp: Gimp Integer Overflow
  48. CVE-2025-6032podman: podman missing TLS verification
  49. CVE-2025-6023grafana: Cross Site Scripting in Grafana
  50. CVE-2025-6021libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
CVE 2025 document archive — Page 76 | PulseLinux