PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 81

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 81 / 82

  1. CVE-2025-1125grub2: fs/hfs: Integer overflow may lead to heap based out-of-bounds write
  2. CVE-2025-1118grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled
  3. CVE-2025-1094postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
  4. CVE-2025-1088grafana: Grafana Improper Input Validation Vulnerability
  5. CVE-2025-1080libreoffice: Macro URL arbitrary script execution
  6. CVE-2025-1057keylime: Keylime Registrar DoS Due to Incompatible Database Entry Handling
  7. CVE-2025-1020firefox: thunderbird: Memory safety bugs fixed in Firefox 135 and Thunderbird 135
  8. CVE-2025-1019firefox: thunderbird: Fullscreen notification not properly displayed
  9. CVE-2025-1018firefox: thunderbird: Fullscreen notification is not displayed when fullscreen is re-requested
  10. CVE-2025-1017firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7
  11. CVE-2025-1016firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7
  12. CVE-2025-1015thunderbird: Unsanitized address book fields
  13. CVE-2025-1014firefox: thunderbird: Certificate length was not properly checked
  14. CVE-2025-1013firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows
  15. CVE-2025-1012firefox: thunderbird: Use-after-free during concurrent delazification
  16. CVE-2025-1011firefox: thunderbird: A bug in WebAssembly code generation could result in a crash
  17. CVE-2025-1010firefox: thunderbird: Use-after-free in Custom Highlight
  18. CVE-2025-1009firefox: thunderbird: Use-after-free in XSLT
  19. CVE-2025-0938python: cpython: URL parser allowed square brackets in domain names
  20. CVE-2025-0840binutils: GNU Binutils objdump.c disassemble_bytes stack-based overflow
  21. CVE-2025-0725libcurl: Buffer Overflow in libcurl via zlib Integer Overflow
  22. CVE-2025-0716angular: AngularJS improper sanitization in SVG ' ' element
  23. CVE-2025-0690grub2: read: Integer overflow may lead to out-of-bounds write
  24. CVE-2025-0689grub2: udf: Heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution
  25. CVE-2025-0686grub2: romfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat
  26. CVE-2025-0685grub2: jfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data
  27. CVE-2025-0684grub2: reiserfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data
  28. CVE-2025-0678grub2: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data
  29. CVE-2025-0677grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks
  30. CVE-2025-0665libcurl: Double Close of Eventfd in libcurl
  31. CVE-2025-0650ovn: egress ACLs may be bypassed via specially crafted UDP packet
  32. CVE-2025-0633iniparser: Heap Overflow in iniparser.c
  33. CVE-2025-0624grub2: net: Out-of-bounds write in grub_net_search_config_file()
  34. CVE-2025-0622grub2: command/gpg: Use-after-free due to hooks not being removed on module unload
  35. CVE-2025-0620samba: smbd doesn't pick up group membership changes when re-authenticating an expired SMB session
  36. CVE-2025-0577glibc: vDSO getrandom acceleration may return predictable randomness
  37. CVE-2025-0514libreoffice: Executable hyperlink Windows path targets executed unconditionally on activation
  38. CVE-2025-0510thunderbird: Address of e-mail sender can be spoofed by malicious email
  39. CVE-2025-0444chromium-browser: skia: chromium-browser: skia: Use after free in Skia
  40. CVE-2025-0436chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
  41. CVE-2025-0395glibc: buffer overflow in the GNU C Library's assert()
  42. CVE-2025-0306ruby: openssl: Ruby Marvin Attack
  43. CVE-2025-0247firefox: thunderbird: Memory safety bugs fixed in Firefox 134 and Thunderbird 134
  44. CVE-2025-0246firefox: Address bar spoofing using an invalid protocol scheme on Firefox for Android
  45. CVE-2025-0245firefox: Lock screen setting bypass in Firefox Focus for Android
  46. CVE-2025-0244firefox: Address bar spoofing using an invalid protocol scheme on Firefox for Android
  47. CVE-2025-0243firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6
  48. CVE-2025-0242firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6
  49. CVE-2025-0241firefox: Memory corruption when using JavaScript Text Segmentation
  50. CVE-2025-0240firefox: Compartment mismatch when parsing JavaScript JSON module
CVE 2025 document archive — Page 81 | PulseLinux