2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-11756 | HIGH | 8.8 | 0.4% | Nov 6, 2025 | Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised t... |
| CVE-2025-11460 | HIGH | 8.8 | 0.3% | Nov 6, 2025 | Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code vi... |
| CVE-2025-11458 | HIGH | 8.1 | 0.3% | Nov 6, 2025 | Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of boun... |
| CVE-2025-64178 | HIGH | 8.9 | 0.3% | Nov 6, 2025 | Jellysweep is a cleanup tool for the Jellyfin media server. In versions 0.12.1 and below, /api/images/cache, used to dow... |
| CVE-2025-11211 | HIGH | 7.5 | 0.4% | Nov 6, 2025 | Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out... |
| CVE-2025-11209 | HIGH | 8.2 | 0.2% | Nov 6, 2025 | Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker to ... |
| CVE-2025-11206 | HIGH | 7.1 | 0.2% | Nov 6, 2025 | Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a... |
| CVE-2025-11205 | HIGH | 8.8 | 0.3% | Nov 6, 2025 | Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the... |
| CVE-2025-64173 | HIGH | 7.5 | 0.3% | Nov 6, 2025 | Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation ... |
| CVE-2025-52881 | HIGH | 7.5 | 0.5% | Nov 6, 2025 | runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and ... |
| CVE-2025-12790 | HIGH | 7.4 | 0.3% | Nov 6, 2025 | A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Ma... |
| CVE-2025-12489 | HIGH | 7.8 | 1.3% | Nov 6, 2025 | evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local at... |
| CVE-2025-12486 | HIGH | 8.8 | 0.4% | Nov 6, 2025 | Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote ... |
| CVE-2025-52565 | HIGH | 7.5 | 0.5% | Nov 6, 2025 | runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.... |
| CVE-2025-34239 | HIGH | 7.2 | 1.6% | Nov 6, 2025 | Advantech WebAccess/VPN versions prior to 1.1.5 contain a command injection vulnerability in AppManagementController.app... |
| CVE-2025-12490 | HIGH | 8.8 | 18.7% | Nov 6, 2025 | Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacke... |
| CVE-2025-63551 | HIGH | 7.5 | 0.4% | Nov 6, 2025 | A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in... |
| CVE-2025-60541 | HIGH | 7.3 | 0.2% | Nov 6, 2025 | A Server-Side Request Forgery (SSRF) in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows ... |
| CVE-2025-31133 | HIGH | 7.8 | 0.7% | Nov 6, 2025 | runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, ... |
| CVE-2025-27919 | HIGH | 8.2 | 0.3% | Nov 6, 2025 | An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can ... |
| CVE-2025-27917 | HIGH | 7.5 | 0.4% | Nov 6, 2025 | An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.... |
| CVE-2025-27916 | HIGH | 7.5 | 0.3% | Nov 6, 2025 | An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection be... |
| CVE-2025-63589 | HIGH | 7.1 | 0.3% | Nov 6, 2025 | A reflected XSS vulnerability exists in CMSimple_XH 1.8's index.php router when attacker-controlled path segments are no... |
| CVE-2025-63588 | HIGH | 7.1 | 0.3% | Nov 6, 2025 | An unauthenticated reflected cross-site scripting vulnerability in the query handling of CMSimpleXH allows remote attack... |
| CVE-2025-63560 | HIGH | 7.5 | 0.6% | Nov 6, 2025 | An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to c... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now