2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-53479 | MEDIUM | 5.4 | 0.2% | Jul 8, 2025 | The CheckUser extension’s Special:CheckUser interface is vulnerable to reflected XSS via the rev-deleted-user message. T... |
| CVE-2025-4663 | MEDIUM | 4.9 | 0.3% | Jul 8, 2025 | An Improper Check for Unusual or Exceptional Conditions vulnerability in Brocade Fabric OS before 9.2.2.a could allow ... |
| CVE-2025-47135 | MEDIUM | 5.5 | 0.2% | Jul 8, 2025 | Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure o... |
| CVE-2025-53513 | MEDIUM | 6.5 | 0.6% | Jul 8, 2025 | The /charms endpoint on a Juju controller lacked sufficient authorization checks, allowing any user with an account on t... |
| CVE-2025-53512 | MEDIUM | 6.5 | 0.3% | Jul 8, 2025 | The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access deb... |
| CVE-2025-49722 | MEDIUM | 5.7 | 0.5% | Jul 8, 2025 | Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over... |
| CVE-2025-49706 | MEDIUM | 6.5 | 99.9% | Jul 8, 2025 | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a networ... |
| CVE-2025-49684 | MEDIUM | 5.5 | 0.4% | Jul 8, 2025 | Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally. |
| CVE-2025-49681 | MEDIUM | 6.5 | 1.0% | Jul 8, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor... |
| CVE-2025-49671 | MEDIUM | 6.5 | 1.0% | Jul 8, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an... |
| CVE-2025-49670 | MEDIUM | 6.5 | 0.9% | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-49664 | MEDIUM | 5.5 | 0.5% | Jul 8, 2025 | Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authoriz... |
| CVE-2025-49658 | MEDIUM | 5.5 | 0.4% | Jul 8, 2025 | Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally. |
| CVE-2025-48823 | MEDIUM | 5.9 | 0.6% | Jul 8, 2025 | Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to disclose information over a ne... |
| CVE-2025-48818 | MEDIUM | 6.8 | 0.4% | Jul 8, 2025 | Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a secur... |
| CVE-2025-48812 | MEDIUM | 5.5 | 0.5% | Jul 8, 2025 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2025-48811 | MEDIUM | 6.7 | 0.3% | Jul 8, 2025 | Missing support for integrity check in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker... |
| CVE-2025-48810 | MEDIUM | 5.5 | 0.4% | Jul 8, 2025 | Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authori... |
| CVE-2025-48809 | MEDIUM | 5.5 | 0.4% | Jul 8, 2025 | Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker... |
| CVE-2025-48808 | MEDIUM | 5.5 | 0.5% | Jul 8, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose i... |
| CVE-2025-48804 | MEDIUM | 6.8 | 0.5% | Jul 8, 2025 | Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass... |
| CVE-2025-48803 | MEDIUM | 6.7 | 0.3% | Jul 8, 2025 | Missing support for integrity check in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker... |
| CVE-2025-48802 | MEDIUM | 6.5 | 0.7% | Jul 8, 2025 | Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network. |
| CVE-2025-48800 | MEDIUM | 6.8 | 0.5% | Jul 8, 2025 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a ph... |
| CVE-2025-48003 | MEDIUM | 6.8 | 0.5% | Jul 8, 2025 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a ph... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now