2025 CVE Vulnerabilities
45,221 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-50174 | HIGH | 7 | 0.3% | Oct 14, 2025 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
| CVE-2025-50152 | HIGH | 7.8 | 0.4% | Oct 14, 2025 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2025-49708 | CRITICAL | 9.9 | 1.1% | Oct 14, 2025 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-48813 | MEDIUM | 4.7 | 0.2% | Oct 14, 2025 | Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally. |
| CVE-2025-48004 | HIGH | 7 | 1.8% | Oct 14, 2025 | Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. |
| CVE-2025-47989 | HIGH | 7 | 0.5% | Oct 14, 2025 | Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. |
| CVE-2025-47979 | MEDIUM | 5.5 | 0.6% | Oct 14, 2025 | Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose i... |
| CVE-2025-37148 | MEDIUM | 6.5 | 0.2% | Oct 14, 2025 | A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote atta... |
| CVE-2025-37147 | HIGH | 7.1 | 0.1% | Oct 14, 2025 | A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root... |
| CVE-2025-37146 | HIGH | 7.2 | 0.8% | Oct 14, 2025 | A vulnerability in the web-based management interface of network access point configuration services could allow an auth... |
| CVE-2025-37145 | MEDIUM | 4.9 | 0.4% | Oct 14, 2025 | Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobilit... |
| CVE-2025-37144 | MEDIUM | 4.9 | 0.4% | Oct 14, 2025 | Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobilit... |
| CVE-2025-37143 | MEDIUM | 4.9 | 0.3% | Oct 14, 2025 | An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/... |
| CVE-2025-37142 | MEDIUM | 4.9 | 0.3% | Oct 14, 2025 | Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor ope... |
| CVE-2025-37141 | MEDIUM | 4.9 | 0.3% | Oct 14, 2025 | Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor ope... |
| CVE-2025-37140 | MEDIUM | 4.9 | 0.3% | Oct 14, 2025 | Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor ope... |
| CVE-2025-37139 | MEDIUM | 6 | 0.1% | Oct 14, 2025 | A vulnerability in an AOS firmware binary allows an authenticated malicious actor to permanently delete necessary boot i... |
| CVE-2025-37138 | MEDIUM | 6.2 | 0.7% | Oct 14, 2025 | An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Cont... |
| CVE-2025-37137 | MEDIUM | 6.5 | 0.3% | Oct 14, 2025 | Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobili... |
| CVE-2025-37136 | MEDIUM | 6.5 | 0.3% | Oct 14, 2025 | Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobili... |
| CVE-2025-37135 | MEDIUM | 6.5 | 0.3% | Oct 14, 2025 | Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobili... |
| CVE-2025-37134 | HIGH | 7.2 | 1.3% | Oct 14, 2025 | An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor oper... |
| CVE-2025-37133 | HIGH | 7.2 | 1.3% | Oct 14, 2025 | An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor oper... |
| CVE-2025-37132 | HIGH | 7.2 | 0.5% | Oct 14, 2025 | An arbitrary file write vulnerability exists in the web-based management interface of both the AOS-10 GW and AOS-8 Contr... |
| CVE-2025-36730 | MEDIUM | 4.6 | 0.2% | Oct 14, 2025 | A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now