2025 CVE Vulnerabilities

45,172 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-6250MEDIUM6.7Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypass...
CVE-2025-32731MEDIUM6.1A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream Med...
CVE-2025-30126MEDIUM5.3An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Via port 7777 without any need to pair or press a phy...
CVE-2025-8275MEDIUM5.3A vulnerability, which was classified as problematic, has been found in bsc Peru Cocktails App 1.0.0 on Android. Affecte...
CVE-2025-54569MEDIUM4.5In Malwarebytes Binisoft Windows Firewall Control before 6.16.0.0, the installer is vulnerable to local privilege escala...
CVE-2025-38496MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If "try_veri...
CVE-2025-38495MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can c...
CVE-2025-38493MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix crash in timerlat_dump_stack()...
CVE-2025-38492MEDIUM4.7In the Linux kernel, the following vulnerability has been resolved: netfs: Fix race between cache write completion and ...
CVE-2025-38491MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision a...
CVE-2025-38489MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpf_arch_text_poke() with new_addr ==...
CVE-2025-38487MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Don't disable channels that...
CVE-2025-38486MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: soundwire: Revert "soundwire: qcom: Add set_channel...
CVE-2025-38481MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: comedi: Fail COMEDI_INSNLIST ioctl if n_insns is to...
CVE-2025-38480MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized data in insn_rw_em...
CVE-2025-38478MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: comedi: Fix initialization of data for instructions...
CVE-2025-38477MEDIUM4.7In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggre...
CVE-2025-38475MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: smc: Fix various oops due to inet_sock type confusi...
CVE-2025-38474MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The...
CVE-2025-38473MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_...
CVE-2025-38472MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal o...
CVE-2025-38470MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of togglin...
CVE-2025-38469MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen...
CVE-2025-38468MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htb_lookup_leaf encount...
CVE-2025-40730MEDIUM4.8HTML injection in Vox Media's Chorus CMS. This vulnerability allows an attacker to execute JavaScript code in the victim...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now