2025 CVE Vulnerabilities
45,221 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-10041 | CRITICAL | 9.8 | 0.9% | Oct 15, 2025 | The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat... |
| CVE-2025-10038 | MEDIUM | 6.5 | 0.3% | Oct 15, 2025 | The Binary MLM Plan plugin for WordPress is vulnerable to limited Privilege Escalation in all versions up to, and includ... |
| CVE-2025-61941 | HIGH | 8.6 | 0.5% | Oct 15, 2025 | A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered b... |
| CVE-2025-55039 | MEDIUM | 6.5 | 0.2% | Oct 15, 2025 | This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 an... |
| CVE-2025-40000 | HIGH | 8.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89_core_tx_ki... |
| CVE-2025-39999 | — | — | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix blk_mq_tags double free while nr_reques... |
| CVE-2025-39998 | HIGH | 7.1 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: target_core_configfs: Add length chec... |
| CVE-2025-39997 | — | — | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix race condition to UAF in snd_u... |
| CVE-2025-39996 | — | — | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: b2c2: Fix use-after-free causing by irq_chec... |
| CVE-2025-39995 | — | — | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs cause... |
| CVE-2025-39994 | HIGH | 7.3 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: tuner: xc5000: Fix use-after-free in xc5000_... |
| CVE-2025-39993 | HIGH | 7.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imon_disconnect() Syzbot... |
| CVE-2025-39992 | — | — | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before ope... |
| CVE-2025-39991 | — | — | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3... |
| CVE-2025-39990 | HIGH | 7.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in get_help... |
| CVE-2025-39988 | HIGH | 7.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: populate ndo_change_mtu() to preve... |
| CVE-2025-39987 | HIGH | 7.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndo_change_mtu() to prevent b... |
| CVE-2025-39986 | HIGH | 7.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: can: sun4i_can: populate ndo_change_mtu() to preven... |
| CVE-2025-39985 | HIGH | 7.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: populate ndo_change_mtu() to prevent... |
| CVE-2025-39984 | — | — | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi->skb after XDP process The s... |
| CVE-2025-39983 | HIGH | 8.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeu... |
| CVE-2025-39982 | HIGH | 8.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_con... |
| CVE-2025-39981 | HIGH | 7.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to... |
| CVE-2025-39980 | — | — | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: nexthop: Forbid FDB status change while nexthop is ... |
| CVE-2025-39979 | HIGH | 7.8 | 0.2% | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release Fix ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now