Week: 2025-W33

i2c: qup: jump out of the loop in case of timeout

2025-08-12 CVE-2025-38671

ice: add NULL check in eswitch lag check

2025-08-12 CVE-2025-38526

ice: Fix a null pointer dereference in ice_copy_and_init_pkg()

2025-08-12 CVE-2025-38664

iio: common: st_sensors: Fix use of uninitialize device structs

2025-08-12 CVE-2025-38531

In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt.

2025-08-12 CVE-2025-54350

In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

2025-08-12 CVE-2025-54349

In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).

2025-08-12 CVE-2025-54351

Incorrect results returned from Rows.Scan in database/sql

2025-08-12 CVE-2025-47907

iommu/amd: Avoid stack buffer overflow from kernel cmdline

2025-08-12 CVE-2025-38676

ipv6: mcast: Delay put pmc->idev in mld_del_delrec()

2025-08-12 CVE-2025-38550

ipv6: reject malicious packets in ipv6_gso_segment()

2025-08-12 CVE-2025-38572

iwlwifi: Add missing check for alloc_ordered_workqueue

2025-08-12 CVE-2025-38602

JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference

2025-08-12 CVE-2025-8835

JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion

2025-08-12 CVE-2025-8836

JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free

2025-08-12 CVE-2025-8837

jqlang jq JSON jq_test.c run_jq_tests assertion

2025-08-12 CVE-2025-9403

kasan: remove kasan_find_vm_area() to prevent possible deadlock

2025-08-12 CVE-2025-38510

Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.

2025-08-12 CVE-2025-8747

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2025-08-12 CVE-2025-53149

ksmbd: fix null pointer dereference error in generate_encryptionkey

2025-08-12 CVE-2025-38562

ksmbd: fix Preauh_HashValue race condition

2025-08-12 CVE-2025-38561

criticalMicrosoft MSRC 2025-W33

ksmbd: limit repeated connections from clients with the same IP

2025-08-12 CVE-2025-38501

Kubernetes: Schwachstelle ermöglicht Offenlegung von Informationen

2025-08-12 CVE-2024-3177

lowBSI 2025-W33

Libssh: write beyond bounds in binary to base64 conversion functions

2025-08-12 CVE-2025-4877

LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference

2025-08-12 CVE-2024-13978

libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference

2025-08-12 CVE-2025-8534

LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak

2025-08-12 CVE-2025-9165

LibTIFF tiffcrop tiffcrop.c main memory corruption

2025-08-12 CVE-2025-8961

LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow

2025-08-12 CVE-2025-8851

libxml2 xmlcatalog xmlParseSGMLCatalog recursion

2025-08-12 CVE-2025-8732

Microsoft 365 Copilot BizChat Information Disclosure Vulnerability

2025-08-12 CVE-2025-53774

Microsoft 365 Copilot BizChat Information Disclosure Vulnerability

2025-08-12 CVE-2025-53787

Microsoft Azure File Sync Elevation of Privilege Vulnerability

2025-08-12 CVE-2025-53729

Microsoft Brokering File System Elevation of Privilege Vulnerability

2025-08-12 CVE-2025-53142

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

2025-08-12 CVE-2025-49745

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

2025-08-12 CVE-2025-53728

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2025-08-12 CVE-2025-49736

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2025-08-12 CVE-2025-49755

Microsoft Excel Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53735

Microsoft Excel Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53737

Microsoft Excel Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53739

Microsoft Excel Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53741

Microsoft Excel Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53759

Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability

2025-08-12 CVE-2025-53786

Microsoft Exchange Server Information Disclosure Vulnerability

2025-08-12 CVE-2025-33051

Microsoft Exchange Server Spoofing Vulnerability

2025-08-12 CVE-2025-25006

Microsoft Exchange Server Spoofing Vulnerability

2025-08-12 CVE-2025-25007

Microsoft Exchange Server Tampering Vulnerability

2025-08-12 CVE-2025-25005

Microsoft Internet Explorer Resource Management Errors Vulnerability

2025-08-12 CVE-2013-3893

highMicrosoft CVE 2025-W33

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

2025-08-12 CVE-2025-50177

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53143

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53144

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53145

Microsoft Office Excel Remote Code Execution Vulnerability

2025-08-12 CVE-2007-0671

highMicrosoft CVE 2025-W33

Microsoft Office Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53731

Microsoft Office Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53732

Microsoft Office Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53740

Microsoft Office Visio Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53730

Microsoft Office Visio Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53734