2025 CVE Vulnerabilities
45,247 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-54250 | MEDIUM | 4.9 | 0.4% | Sep 9, 2025 | Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that c... |
| CVE-2025-54249 | MEDIUM | 6.5 | 1.8% | Sep 9, 2025 | Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit... |
| CVE-2025-54248 | HIGH | 7.7 | 5.2% | Sep 9, 2025 | Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that c... |
| CVE-2025-54247 | MEDIUM | 6.5 | 0.4% | Sep 9, 2025 | Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that c... |
| CVE-2025-54246 | MEDIUM | 6.5 | 0.4% | Sep 9, 2025 | Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Incorrect Authorization vulnerability that cou... |
| CVE-2025-54116 | HIGH | 7.3 | 0.5% | Sep 9, 2025 | Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally. |
| CVE-2025-54115 | HIGH | 7 | 0.4% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an... |
| CVE-2025-54114 | HIGH | 7 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices... |
| CVE-2025-54113 | HIGH | 8.8 | 0.8% | Sep 9, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2025-54112 | HIGH | 7 | 0.4% | Sep 9, 2025 | Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally. |
| CVE-2025-54111 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally. |
| CVE-2025-54110 | HIGH | 8.8 | 3.8% | Sep 9, 2025 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2025-54109 | MEDIUM | 6.7 | 0.4% | Sep 9, 2025 | Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized ... |
| CVE-2025-54108 | HIGH | 7 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Managem... |
| CVE-2025-54107 | MEDIUM | 4.3 | 0.9% | Sep 9, 2025 | Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security fea... |
| CVE-2025-54106 | HIGH | 8.8 | 1.3% | Sep 9, 2025 | Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to ex... |
| CVE-2025-54105 | HIGH | 7 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File ... |
| CVE-2025-54104 | MEDIUM | 6.7 | 0.4% | Sep 9, 2025 | Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized ... |
| CVE-2025-54103 | HIGH | 7.4 | 0.4% | Sep 9, 2025 | Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges locally. |
| CVE-2025-54102 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally... |
| CVE-2025-54101 | MEDIUM | 4.8 | 2.4% | Sep 9, 2025 | Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network. |
| CVE-2025-54099 | HIGH | 7 | 0.4% | Sep 9, 2025 | Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate pr... |
| CVE-2025-54098 | HIGH | 7.8 | 2.6% | Sep 9, 2025 | Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2025-54097 | MEDIUM | 6.5 | 1.1% | Sep 9, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor... |
| CVE-2025-54096 | MEDIUM | 6.5 | 1.1% | Sep 9, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now