2025 CVE Vulnerabilities
45,246 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-57069 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser... |
| CVE-2025-57064 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpR... |
| CVE-2025-57063 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelP... |
| CVE-2025-57062 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpR... |
| CVE-2025-57061 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via t... |
| CVE-2025-57059 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule fun... |
| CVE-2025-57058 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the p... |
| CVE-2025-57057 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStor... |
| CVE-2025-55317 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authorized attack... |
| CVE-2025-55316 | HIGH | 7.8 | 0.3% | Sep 9, 2025 | External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55245 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate privileg... |
| CVE-2025-55243 | HIGH | 7.5 | 1.0% | Sep 9, 2025 | Exposure of sensitive information to an unauthorized actor in Microsoft Office Plus allows an unauthorized attacker to p... |
| CVE-2025-55236 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker to execute code local... |
| CVE-2025-55234 | CRITICAL | 9.8 | 18.8% | Sep 9, 2025 | SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited ... |
| CVE-2025-55232 | CRITICAL | 9.8 | 1.9% | Sep 9, 2025 | Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to ex... |
| CVE-2025-55228 | HIGH | 7.8 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all... |
| CVE-2025-55227 | HIGH | 8.8 | 1.2% | Sep 9, 2025 | Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized a... |
| CVE-2025-55226 | MEDIUM | 6.7 | 0.4% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an... |
| CVE-2025-55225 | MEDIUM | 6.5 | 1.1% | Sep 9, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor... |
| CVE-2025-55224 | HIGH | 7.8 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all... |
| CVE-2025-55223 | HIGH | 7 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an... |
| CVE-2025-54919 | HIGH | 7.5 | 0.4% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all... |
| CVE-2025-54918 | HIGH | 8.8 | 18.7% | Sep 9, 2025 | Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-54917 | MEDIUM | 4.3 | 0.8% | Sep 9, 2025 | Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a... |
| CVE-2025-54916 | HIGH | 7.8 | 2.1% | Sep 9, 2025 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now