2025 CVE Vulnerabilities
45,326 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-55338 | MEDIUM | 4.6 | 2.9% | Oct 14, 2025 | Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with... |
| CVE-2025-55337 | MEDIUM | 4.6 | 0.5% | Oct 14, 2025 | Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security fe... |
| CVE-2025-55336 | MEDIUM | 5.5 | 0.6% | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Cloud Files Mini Filter Driver allows an authorize... |
| CVE-2025-55334 | MEDIUM | 5.5 | 0.3% | Oct 14, 2025 | Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security featur... |
| CVE-2025-55333 | MEDIUM | 4.6 | 0.8% | Oct 14, 2025 | Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security fea... |
| CVE-2025-55332 | MEDIUM | 4.6 | 0.5% | Oct 14, 2025 | Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security fe... |
| CVE-2025-55330 | MEDIUM | 4.6 | 0.5% | Oct 14, 2025 | Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security fe... |
| CVE-2025-55325 | MEDIUM | 5.5 | 0.5% | Oct 14, 2025 | Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. |
| CVE-2025-55320 | MEDIUM | 6.8 | 0.6% | Oct 14, 2025 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager ... |
| CVE-2025-55248 | MEDIUM | 5.7 | 0.7% | Oct 14, 2025 | Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose informat... |
| CVE-2025-48813 | MEDIUM | 4.7 | 0.2% | Oct 14, 2025 | Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally. |
| CVE-2025-47979 | MEDIUM | 5.5 | 0.6% | Oct 14, 2025 | Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose i... |
| CVE-2025-37148 | MEDIUM | 6.5 | 0.2% | Oct 14, 2025 | A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote atta... |
| CVE-2025-37145 | MEDIUM | 4.9 | 0.4% | Oct 14, 2025 | Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobilit... |
| CVE-2025-37144 | MEDIUM | 4.9 | 0.4% | Oct 14, 2025 | Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobilit... |
| CVE-2025-37143 | MEDIUM | 4.9 | 0.3% | Oct 14, 2025 | An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/... |
| CVE-2025-37142 | MEDIUM | 4.9 | 0.3% | Oct 14, 2025 | Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor ope... |
| CVE-2025-37141 | MEDIUM | 4.9 | 0.3% | Oct 14, 2025 | Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor ope... |
| CVE-2025-37140 | MEDIUM | 4.9 | 0.3% | Oct 14, 2025 | Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor ope... |
| CVE-2025-37139 | MEDIUM | 6 | 0.1% | Oct 14, 2025 | A vulnerability in an AOS firmware binary allows an authenticated malicious actor to permanently delete necessary boot i... |
| CVE-2025-37138 | MEDIUM | 6.2 | 0.7% | Oct 14, 2025 | An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Cont... |
| CVE-2025-37137 | MEDIUM | 6.5 | 0.3% | Oct 14, 2025 | Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobili... |
| CVE-2025-37136 | MEDIUM | 6.5 | 0.3% | Oct 14, 2025 | Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobili... |
| CVE-2025-37135 | MEDIUM | 6.5 | 0.3% | Oct 14, 2025 | Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobili... |
| CVE-2025-36730 | MEDIUM | 4.6 | 0.2% | Oct 14, 2025 | A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now