2025 CVE Vulnerabilities
45,259 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-7187 | HIGH | 8.8 | 0.4% | Jul 8, 2025 | A vulnerability classified as critical has been found in code-projects Chat System 1.0. Affected is an unknown function ... |
| CVE-2025-7186 | HIGH | 8.8 | 0.4% | Jul 8, 2025 | A vulnerability was found in code-projects Chat System 1.0. It has been rated as critical. This issue affects some unkno... |
| CVE-2025-53513 | MEDIUM | 6.5 | 0.6% | Jul 8, 2025 | The /charms endpoint on a Juju controller lacked sufficient authorization checks, allowing any user with an account on t... |
| CVE-2025-53512 | MEDIUM | 6.5 | 0.3% | Jul 8, 2025 | The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access deb... |
| CVE-2025-49760 | LOW | 3.5 | 1.3% | Jul 8, 2025 | External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a networ... |
| CVE-2025-49756 | LOW | 3.3 | 0.2% | Jul 8, 2025 | Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a ... |
| CVE-2025-49753 | HIGH | 8.8 | 0.7% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-49744 | HIGH | 7 | 0.7% | Jul 8, 2025 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49742 | HIGH | 7.8 | 0.3% | Jul 8, 2025 | Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally. |
| CVE-2025-49740 | HIGH | 8.8 | 0.7% | Jul 8, 2025 | Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a ... |
| CVE-2025-49739 | HIGH | 8.8 | 0.8% | Jul 8, 2025 | Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to eleva... |
| CVE-2025-49738 | HIGH | 7.8 | 0.3% | Jul 8, 2025 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to ... |
| CVE-2025-49737 | HIGH | 7 | 0.2% | Jul 8, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an... |
| CVE-2025-49735 | HIGH | 8.1 | 1.1% | Jul 8, 2025 | Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network. |
| CVE-2025-49733 | HIGH | 7.8 | 0.3% | Jul 8, 2025 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49732 | HIGH | 7.8 | 0.3% | Jul 8, 2025 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49731 | LOW | 3.1 | 0.4% | Jul 8, 2025 | Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate ... |
| CVE-2025-49730 | HIGH | 7.8 | 0.6% | Jul 8, 2025 | Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to el... |
| CVE-2025-49729 | HIGH | 8.8 | 0.6% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-49727 | HIGH | 7 | 0.3% | Jul 8, 2025 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49726 | HIGH | 7.8 | 0.3% | Jul 8, 2025 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49725 | HIGH | 7.8 | 0.3% | Jul 8, 2025 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49724 | HIGH | 8.8 | 6.9% | Jul 8, 2025 | Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a netw... |
| CVE-2025-49723 | HIGH | 8.8 | 0.3% | Jul 8, 2025 | Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally. |
| CVE-2025-49722 | MEDIUM | 5.7 | 0.5% | Jul 8, 2025 | Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now