Vendor: microsoft

smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

2025-10-14 CVE-2025-39929

smb: client: let recv_done verify data_offset, data_length and remaining_data_length

2025-10-14 CVE-2025-39933

smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)

2025-10-14 CVE-2025-39932

smc: Fix use-after-free in __pnet_find_base_ndev().

2025-10-14 CVE-2025-40064

spi: cadence-quadspi: Implement refcount to handle unbind during busy

2025-10-14 CVE-2025-40005

Squid vulnerable to information disclosure via authentication credential leakage in error handling

2025-10-14 CVE-2025-62168

criticalMicrosoft MSRC 2025-W42

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand

2025-10-14 CVE-2025-61984

lowMicrosoft MSRC 2025-W42

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

2025-10-14 CVE-2025-61985

lowMicrosoft MSRC 2025-W42

tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.

2025-10-14 CVE-2025-39913

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

2025-10-14 CVE-2025-39955

tls: make sure to abort the stream if headers are bogus

2025-10-14 CVE-2025-39946

tracing: dynevent: Add a missing lockdown check on dynevent

2025-10-14 CVE-2025-40021

tracing: Fix race condition in kprobe initialization causing NULL pointer dereference

2025-10-14 CVE-2025-40042

tracing: Silence warning when chunk allocation fails in trace_pid_write

2025-10-14 CVE-2025-39914

uio_hv_generic: Let userspace take care of interrupt mask

2025-10-14 CVE-2025-40048

um: virtio_uml: Fix use-after-free after put_device in probe

2025-10-14 CVE-2025-39951

Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG

2025-10-14 CVE-2025-10729

criticalMicrosoft MSRC 2025-W42

vhost: Take a reference on the task in struct vhost_task.

2025-10-14 CVE-2025-40024

vhost: vringh: Fix copy_to_iter return value check

2025-10-14 CVE-2025-40056

vhost: vringh: Modify the return value check

2025-10-14 CVE-2025-40051

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2025-10-14 CVE-2025-53044

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2025-10-14 CVE-2025-53045

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2025-10-14 CVE-2025-53054

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2025-10-14 CVE-2025-53062

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4

2025-10-14 CVE-2025-53069

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily explo

2025-10-14 CVE-2025-53053

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily

2025-10-14 CVE-2025-53040

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily

2025-10-14 CVE-2025-53042

wifi: mac80211: increase scan_ies_len for S1G

2025-10-14 CVE-2025-39957

wifi: mwifiex: Initialize the chan_stats array to zero

2025-10-14 CVE-2025-39891

wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()

2025-10-14 CVE-2025-40000

criticalMicrosoft MSRC 2025-W42

wifi: wilc1000: avoid buffer overflow in WID string configuration

2025-10-14 CVE-2025-39952

x86: fix clear_user_rep_good() exception handling annotation

2025-10-14 CVE-2023-53642

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

2025-10-14 CVE-2025-39965

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension funct

2025-10-14 CVE-2024-31573

Xorg: xmayland: use-after-free in xpresentnotify structure creation

2025-10-14 CVE-2025-62229

Xorg: xmayland: value overflow in xkbsetcompatmap()

2025-10-14 CVE-2025-62231

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

2025-10-14 CVE-2025-8291

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

2025-10-06 CVE-2010-3962

Microsoft Windows Out-of-Bounds Write Vulnerability

2025-10-06 CVE-2013-3918

Microsoft Windows Privilege Escalation Vulnerability

2025-10-06 CVE-2021-43226

Microsoft Windows Remote Code Execution Vulnerability

2025-10-06 CVE-2011-3402

fs/ntfs3: cancle set bad inode after removing name fails

2025-09-29 CVE-2025-38615

criticalMicrosoft CVE 2025-W40

A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Ind

2025-09-09 CVE-2025-55558

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).

2025-09-09 CVE-2025-55557

A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).

2025-09-09 CVE-2025-55553

accel/habanalabs: fix mem leak in capture user mappings

2025-09-09 CVE-2023-53367

accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()

2025-09-09 CVE-2023-53353

ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered

2025-09-09 CVE-2025-39763

ACPI: pfr_update: Fix the driver update version check

2025-09-09 CVE-2025-39701

ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value

2025-09-09 CVE-2022-50327

ACPI: processor: perflib: Move problematic pr->performance check

2025-09-09 CVE-2025-39799

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

2025-09-09 CVE-2025-55319

ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control

2025-09-09 CVE-2025-39751

ALSA: usb-audio: Validate UAC3 cluster segment descriptors

2025-09-09 CVE-2025-39757

ALSA: usb-audio: Validate UAC3 power domain descriptors, too

2025-09-09 CVE-2025-38729

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

2025-09-09 CVE-2025-55560

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.

2025-09-09 CVE-2025-55551

Arbitary Code execution in Keras load_model()

2025-09-09 CVE-2025-9905