2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-38522 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: sched/ext: Prevent update_locked_rq() calls with NU... |
| CVE-2025-38520 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Don't call mmput from MMU notifier call... |
| CVE-2025-38519 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: mm/damon: fix divide by zero in damon_get_intervals... |
| CVE-2025-38518 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skil... |
| CVE-2025-38517 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: lib/alloc_tag: do not acquire non-existent lock in ... |
| CVE-2025-38516 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: mark certain pins as invalid fo... |
| CVE-2025-38515 | MEDIUM | 4.7 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/sched: Increment job count before swapping tail... |
| CVE-2025-38514 | MEDIUM | 5.5 | 0.2% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix oops due to non-existence of prealloc ba... |
| CVE-2025-38513 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: wifi: zd1211rw: Fix potential NULL pointer derefere... |
| CVE-2025-38511 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM ... |
| CVE-2025-38510 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: kasan: remove kasan_find_vm_area() to prevent possi... |
| CVE-2025-38509 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject VHT opmode for unsupported c... |
| CVE-2025-38508 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: x86/sev: Use TSC_FACTOR for Secure TSC frequency ca... |
| CVE-2025-38507 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: avoid bluetooth suspend/resume stall... |
| CVE-2025-38506 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: KVM: Allow CPU to reschedule while setting per-page... |
| CVE-2025-38505 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames on... |
| CVE-2025-38504 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix pp destruction warnings With mu... |
| CVE-2025-38503 | MEDIUM | 5.5 | 0.1% | Aug 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion when building free space tree ... |
| CVE-2025-8719 | MEDIUM | 6.4 | 0.2% | Aug 16, 2025 | The Translate This gTranslate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘base_... |
| CVE-2025-8464 | MEDIUM | 5.3 | 0.7% | Aug 16, 2025 | The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in a... |
| CVE-2025-7499 | MEDIUM | 5.3 | 0.3% | Aug 16, 2025 | The BetterDocs – Advanced AI-Driven Documentation, FAQ & Knowledge Base Tool for Elementor & Gutenberg with Encyclopedia... |
| CVE-2025-8896 | MEDIUM | 6.4 | 0.2% | Aug 16, 2025 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v... |
| CVE-2025-8089 | MEDIUM | 5.4 | 0.2% | Aug 16, 2025 | The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'additional' parameter in ... |
| CVE-2025-8113 | MEDIUM | 6.1 | 0.2% | Aug 16, 2025 | The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting i... |
| CVE-2025-8293 | MEDIUM | 6.4 | 0.2% | Aug 16, 2025 | The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now