CVE 2025 document archive · 80
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,053 documents · Identifier year 2025 · 80 / 82
- CVE-2025-1942firefox: Disclosure of uninitialized memory when .toUpperCase() causes string to get longer
- CVE-2025-1941firefox: Lock screen setting bypass in Firefox Focus for Android
- CVE-2025-1940firefox: Android Intent confirmation prompt tapjacking using Select options
- CVE-2025-1939firefox: Tapjacking in Android Custom Tabs using transition animations
- CVE-2025-1938firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8
- CVE-2025-1937firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8
- CVE-2025-1936firefox: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents
- CVE-2025-1935firefox: Clickjacking the registerProtocolHandler info-bar Reporter
- CVE-2025-1934firefox: Unexpected GC during RegExp bailout processing
- CVE-2025-1933firefox: JIT corruption of WASM i32 return values on 64-bit CPUs
- CVE-2025-1932firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access
- CVE-2025-1931firefox: Use-after-free in WebTransportChild
- CVE-2025-1930firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process
- CVE-2025-1861php: Stream HTTP wrapper truncates redirect location to 1024 bytes
- CVE-2025-1795python: Mishandling of comma during folding and unicode-encoding of email headers
- CVE-2025-1767kubelet: GitRepo Volume Inadvertent Local Repository Access
- CVE-2025-1736php: Stream HTTP wrapper header check might omit basic auth header
- CVE-2025-1735php: pgsql extension does not check for errors during escaping
- CVE-2025-1734php: Streams HTTP wrapper does not fail for headers with invalid name and no colon
- CVE-2025-1647bootstrap: Bootstrap XSS Vulnerability
- CVE-2025-1632libarchive: null pointer dereference in bsdunzip.c
- CVE-2025-1492wireshark: Uncontrolled Recursion in Wireshark
- CVE-2025-1414firefox: Memory safety bugs fixed in Firefox 135.0.1
- CVE-2025-1390libcap: pam_cap: Fix potential configuration parsing error
- CVE-2025-1377elfutils: GNU elfutils eu-strip strip.c gelf_getsymshndx denial of service
- CVE-2025-1376elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service
- CVE-2025-1372elfutils: GNU elfutils eu-readelf readelf.c print_string_section buffer overflow
- CVE-2025-1371elfutils: GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference
- CVE-2025-1365elfutils: GNU elfutils eu-readelf readelf.c process_symtab buffer overflow
- CVE-2025-1352elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption
- CVE-2025-1272kernel: Secure Boot does not automatically enable kernel lockdown
- CVE-2025-1244emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme
- CVE-2025-1220php: PHP Hostname Null Character Vulnerability
- CVE-2025-1219php: libxml streams use wrong content-type header when requesting a redirected resource
- CVE-2025-1218php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser
- CVE-2025-1217php: Header parser of http stream wrapper does not handle folded headers
- CVE-2025-1215vim: vim main.c memory corruption
- CVE-2025-1182binutils: GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption
- CVE-2025-1181binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption
- CVE-2025-1180binutils: GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption
- CVE-2025-1179binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption
- CVE-2025-1178binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption
- CVE-2025-1176binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow
- CVE-2025-1153binutils: GNU Binutils format.c bfd_set_format memory corruption
- CVE-2025-1152binutils: GNU Binutils ld xstrdup.c xstrdup memory leak
- CVE-2025-1151binutils: GNU Binutils ld xmemdup.c xmemdup memory leak
- CVE-2025-1150binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak
- CVE-2025-1149binutils: GNU Binutils ld xmalloc.c xstrdup memory leak
- CVE-2025-1148binutils: GNU Binutils ld ldelfgen.c link_order_scan memory leak
- CVE-2025-1147binutils: GNU Binutils nm nm.c internal_strlen buffer overflow