PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 78

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 78 / 82

  1. CVE-2025-5165assimp: Assimp MDCImporter Out-of-Bounds Read Vulnerability
  2. CVE-2025-5025curl: libcurl: QUIC Certificate Pinning Bypass
  3. CVE-2025-5024gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs
  4. CVE-2025-4969libsoup: Off-by-One Out-of-Bounds Read in find_boundary() in soup-multipart.c
  5. CVE-2025-4953podman: Build Context Bind Mount
  6. CVE-2025-4948libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup
  7. CVE-2025-4947libcurl: curl: QUIC certificate check skip with wolfSSL
  8. CVE-2025-4945libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup
  9. CVE-2025-4919firefox: thunderbird: Out-of-bounds access when optimizing linear sums
  10. CVE-2025-4918firefox: thunderbird: Out-of-bounds access when resolving Promise objects
  11. CVE-2025-4878libssh: Use of uninitialized variable in privatekey_from_file()
  12. CVE-2025-4877libssh: Write beyond bounds in binary to base64 conversion functions
  13. CVE-2025-4802glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH
  14. CVE-2025-4674cmd/go: Go VCS Command Execution Vulnerability
  15. CVE-2025-4673net/http: Sensitive headers not cleared on cross-origin redirect in net/http
  16. CVE-2025-4598systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump
  17. CVE-2025-4574crossbeam-channel: crossbeam-channel Vulnerable to Double Free on Drop
  18. CVE-2025-4565python-protobuf: Unbounded recursion in Python Protobuf
  19. CVE-2025-4517python: cpython: Arbitrary writes via tarfile realpath overflow
  20. CVE-2025-4516cpython: python: CPython DecodeError Handling Vulnerability
  21. CVE-2025-4478gnome-remote-desktop: freerdp: Unauthenticated RDP Packet Causes Segfault in FreeRDP Leading to Denial of Service
  22. CVE-2025-4476libsoup: Null pointer dereference in libsoup may lead to Denial Of Service
  23. CVE-2025-4447java-1.8.0-ibm: Buffer Overflow in Eclipse OpenJ9
  24. CVE-2025-4435cpython: Tarfile extracts filtered members when errorlevel=0
  25. CVE-2025-4432ring: Some AES functions may panic when overflow checking is enabled in ring
  26. CVE-2025-4404freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA
  27. CVE-2025-4382grub2: grub allow access to encrypted device through CLI once root device is unlocked via TPM
  28. CVE-2025-4373glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar
  29. CVE-2025-4330cpython: python: Extraction filter bypass for linking outside extraction directory
  30. CVE-2025-4211qt: Improper Link Resolution Before File Access in QFileSystemEngine on Windows
  31. CVE-2025-4207postgresql: PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation
  32. CVE-2025-4138cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory
  33. CVE-2025-4123grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect
  34. CVE-2025-4093firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10
  35. CVE-2025-4092firefox: thunderbird: Memory safety bugs fixed in Firefox 138 and Thunderbird 138
  36. CVE-2025-4091firefox: thunderbird: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10
  37. CVE-2025-4090firefox: thunderbird: Leaked library paths in Firefox for Android
  38. CVE-2025-4089firefox: thunderbird: Potential local code execution in "copy as cURL" command
  39. CVE-2025-4088firefox: thunderbird: Cross-site request forgery via storage access API redirects
  40. CVE-2025-4087firefox: thunderbird: Unsafe attribute access during XPath parsing
  41. CVE-2025-4086firefox: thunderbird: Specially crafted filename could be used to obscure download type
  42. CVE-2025-4085firefox: thunderbird: Potential information leakage and privilege escalation in UITour actor
  43. CVE-2025-4084firefox: thunderbird: Potential local code execution in "copy as cURL" command
  44. CVE-2025-4083firefox: thunderbird: Process isolation bypass using "javascript:" URI links in cross-origin frames
  45. CVE-2025-4082firefox: thunderbird: WebGL shader attribute memory corruption in Firefox for macOS
  46. CVE-2025-4056glib: glib crash after long command line
  47. CVE-2025-4035libsoup: Cookie domain validation bypass via uppercase characters in libsoup
  48. CVE-2025-3932thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking
  49. CVE-2025-3931yggdrasil: Local privilege escalation in yggdrasil
  50. CVE-2025-3909thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link
CVE 2025 document archive — Page 78 | PulseLinux