2025 CVE Vulnerabilities
45,364 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-37920 | MEDIUM | 4.7 | 0.1% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AF_XDP generic RX path ... |
| CVE-2025-37919 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_s... |
| CVE-2025-37918 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: avoid NULL pointer dereference in... |
| CVE-2025-37917 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursio... |
| CVE-2025-37912 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: ice: Check VF VSI Pointer Value in ice_vc_add_fdir_... |
| CVE-2025-37911 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix out-of-bound memcpy() during ethtool -... |
| CVE-2025-37910 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sy... |
| CVE-2025-37909 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled A... |
| CVE-2025-37907 | MEDIUM | 5.5 | 0.1% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix locking order in ivpu_job_submit F... |
| CVE-2025-37906 | MEDIUM | 4.7 | 0.1% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix race between io_uring_cmd_complete_in_tas... |
| CVE-2025-37905 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Balance device refcount when de... |
| CVE-2025-37904 | MEDIUM | 5.5 | 0.1% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the inode leak in btrfs_iget() [BUG] Th... |
| CVE-2025-37901 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: irqchip/qcom-mpm: Prevent crash when trying to hand... |
| CVE-2025-37900 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix two issues in iommu_copy_struct_from_use... |
| CVE-2025-37898 | MEDIUM | 5.5 | 0.1% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix module loading without patcha... |
| CVE-2025-37897 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: wifi: plfxlc: Remove erroneous assert in plfxlc_mac... |
| CVE-2025-37896 | MEDIUM | 5.5 | 0.1% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-mem: Add fix to avoid divide error For so... |
| CVE-2025-37895 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix error handling path in bnxt_init_chip(... |
| CVE-2025-37894 | MEDIUM | 5.5 | 0.2% | May 20, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: use sock_gen_put() when sk_state is TCP_TIME_W... |
| CVE-2025-41228 | MEDIUM | 4.3 | 0.7% | May 20, 2025 | VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. ... |
| CVE-2025-41227 | MEDIUM | 5.5 | 0.1% | May 20, 2025 | VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious... |
| CVE-2025-41226 | MEDIUM | 6.8 | 0.2% | May 20, 2025 | VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor ... |
| CVE-2025-4980 | MEDIUM | 6.9 | 0.5% | May 20, 2025 | A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability... |
| CVE-2025-47939 | MEDIUM | 5.4 | 0.2% | May 20, 2025 | TYPO3 is an open source, PHP based web content management system. By design, the file management module in TYPO3’s backe... |
| CVE-2025-47937 | MEDIUM | 5.3 | 0.3% | May 20, 2025 | TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now