2025 CVE Vulnerabilities
45,255 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-47857 | MEDIUM | 6.7 | 0.5% | Aug 12, 2025 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in F... |
| CVE-2025-43734 | MEDIUM | 5.4 | 0.2% | Aug 12, 2025 | A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025... |
| CVE-2025-36124 | HIGH | 7.5 | 0.4% | Aug 12, 2025 | IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security rest... |
| CVE-2025-32932 | MEDIUM | 5.4 | 0.2% | Aug 12, 2025 | An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiS... |
| CVE-2025-32766 | MEDIUM | 6.7 | 0.1% | Aug 12, 2025 | A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.... |
| CVE-2025-27759 | MEDIUM | 6.7 | 0.5% | Aug 12, 2025 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in ... |
| CVE-2025-25256 | CRITICAL | 9.8 | 60.3% | Aug 12, 2025 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vul... |
| CVE-2025-25248 | MEDIUM | 6.5 | 0.4% | Aug 12, 2025 | An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, v... |
| CVE-2025-53793 | HIGH | 7.5 | 1.2% | Aug 12, 2025 | Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network. |
| CVE-2025-53789 | HIGH | 7.8 | 0.3% | Aug 12, 2025 | Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate pri... |
| CVE-2025-53788 | HIGH | 7 | 0.2% | Aug 12, 2025 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevat... |
| CVE-2025-53784 | HIGH | 8.4 | 0.4% | Aug 12, 2025 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2025-53783 | HIGH | 7.5 | 0.8% | Aug 12, 2025 | Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. |
| CVE-2025-53781 | MEDIUM | 6.5 | 1.0% | Aug 12, 2025 | Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to di... |
| CVE-2025-53779 | HIGH | 7.2 | 2.6% | Aug 12, 2025 | Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-53778 | HIGH | 8.8 | 36.1% | Aug 12, 2025 | Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-53773 | HIGH | 7.8 | 2.6% | Aug 12, 2025 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio ... |
| CVE-2025-53772 | HIGH | 8.8 | 22.3% | Aug 12, 2025 | Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network. |
| CVE-2025-53769 | MEDIUM | 5.5 | 0.4% | Aug 12, 2025 | External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally. |
| CVE-2025-53766 | CRITICAL | 9.8 | 6.7% | Aug 12, 2025 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
| CVE-2025-53765 | MEDIUM | 5.5 | 0.5% | Aug 12, 2025 | Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclo... |
| CVE-2025-53761 | HIGH | 7.8 | 0.5% | Aug 12, 2025 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
| CVE-2025-53760 | HIGH | 7.1 | 11.1% | Aug 12, 2025 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ov... |
| CVE-2025-53759 | HIGH | 7.8 | 0.5% | Aug 12, 2025 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2025-53741 | HIGH | 7.8 | 0.5% | Aug 12, 2025 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now