Security Warnings — Week: 2025-W37

Oracle Fusion Middleware: Mehrere Schwachstellen

2025-09-14 CVE-2020-5421

highBSI 2025-W37

Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

2025-09-11 CVE-2025-5086

highDassault Systèmes CVE 2025-W37

OpenSC: Schwachstelle ermöglicht Offenlegung von Informationen

2025-09-10 CVE-2023-5992

mediumRed Hat 2025-W37

A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Ind

2025-09-09 CVE-2025-55558

highMicrosoft MSRC 2025-W37

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).

2025-09-09 CVE-2025-55557

highMicrosoft MSRC 2025-W37

A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).

2025-09-09 CVE-2025-55553

highMicrosoft MSRC 2025-W37

accel/habanalabs: fix mem leak in capture user mappings

2025-09-09 CVE-2023-53367

mediumMicrosoft MSRC 2025-W37

accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()

2025-09-09 CVE-2023-53353

mediumMicrosoft MSRC 2025-W37

ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered

2025-09-09 CVE-2025-39763

mediumMicrosoft MSRC 2025-W37

ACPI: pfr_update: Fix the driver update version check

2025-09-09 CVE-2025-39701

mediumMicrosoft MSRC 2025-W37

ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value

2025-09-09 CVE-2022-50327

mediumMicrosoft MSRC 2025-W37

ACPI: processor: perflib: Move problematic pr->performance check

2025-09-09 CVE-2025-39799

mediumMicrosoft MSRC 2025-W37

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

2025-09-09 CVE-2025-55319

highMicrosoft MSRC 2025-W37

ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control

2025-09-09 CVE-2025-39751

highMicrosoft MSRC 2025-W37

ALSA: usb-audio: Validate UAC3 cluster segment descriptors

2025-09-09 CVE-2025-39757

highMicrosoft MSRC 2025-W37

ALSA: usb-audio: Validate UAC3 power domain descriptors, too

2025-09-09 CVE-2025-38729

highMicrosoft MSRC 2025-W37

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

2025-09-09 CVE-2025-55560

highMicrosoft MSRC 2025-W37

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.

2025-09-09 CVE-2025-55551

highMicrosoft MSRC 2025-W37

Arbitary Code execution in Keras load_model()

2025-09-09 CVE-2025-9905

highMicrosoft MSRC 2025-W37

Arbitrary Code execution in Keras Safe Mode

2025-09-09 CVE-2025-9906

highMicrosoft MSRC 2025-W37

ARM: rockchip: fix kernel hang during smp initialization

2025-09-09 CVE-2025-39752

mediumMicrosoft MSRC 2025-W37

ARM: tegra: Use I/O memcpy to write to IRAM

2025-09-09 CVE-2025-39794

mediumMicrosoft MSRC 2025-W37

ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

2025-09-09 CVE-2025-38706

mediumMicrosoft MSRC 2025-W37

atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

2025-09-09 CVE-2025-39828

highMicrosoft MSRC 2025-W37

ax25: properly unshare skbs in ax25_kiss_rcv()

2025-09-09 CVE-2025-39848

mediumMicrosoft MSRC 2025-W37

axboe fio init.c __parse_jobs_ini use after free

2025-09-09 CVE-2025-10824

mediumMicrosoft MSRC 2025-W37

axboe fio options.c str_buffer_pattern_cb null pointer dereference

2025-09-09 CVE-2025-10823

lowMicrosoft MSRC 2025-W37

Axios is vulnerable to DoS attack through lack of data size check

2025-09-09 CVE-2025-58754

highMicrosoft MSRC 2025-W37

Azure Bot Service Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-55244

criticalMicrosoft MSRC 2025-W37

Azure Connected Machine Agent Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-49692

highMicrosoft MSRC 2025-W37

Azure Connected Machine Agent Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-55316

highMicrosoft MSRC 2025-W37

Azure Entra ID Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-55241

criticalMicrosoft MSRC 2025-W37

Azure Networking Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-54914

criticalMicrosoft MSRC 2025-W37

batman-adv: fix OOB read/write in network-coding decode

2025-09-09 CVE-2025-39839

mediumMicrosoft MSRC 2025-W37

blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()

2025-09-09 CVE-2023-53421

mediumMicrosoft MSRC 2025-W37

blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none

2025-09-09 CVE-2023-53292

mediumMicrosoft MSRC 2025-W37

block: avoid possible overflow for chunk_sectors check in blk_stack_limits()

2025-09-09 CVE-2025-39795

mediumMicrosoft MSRC 2025-W37

block: be a bit more careful in checking for NULL bdev while polling

2025-09-09 CVE-2023-53366

mediumMicrosoft MSRC 2025-W37

Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()

2025-09-09 CVE-2025-39860

highMicrosoft MSRC 2025-W37

Bluetooth: hci_core: Disable works on hci_unregister_dev

2025-09-09 CVE-2024-58241

mediumMicrosoft MSRC 2025-W37

Bluetooth: vhci: Prevent use-after-free by removing debugfs files early

2025-09-09 CVE-2025-39861

highMicrosoft MSRC 2025-W37

bnxt_en: Fix memory corruption when FW resources change during ifdown

2025-09-09 CVE-2025-39810

highMicrosoft MSRC 2025-W37

bpf: Fix memleak due to fentry attach failure

2025-09-09 CVE-2023-53221

mediumMicrosoft MSRC 2025-W37

bpf: Forget ranges when refining tnum after JSET

2025-09-09 CVE-2025-39748

mediumMicrosoft MSRC 2025-W37

bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()

2025-09-09 CVE-2025-39886

mediumMicrosoft MSRC 2025-W37

btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()

2025-09-09 CVE-2025-39800

mediumMicrosoft MSRC 2025-W37

btrfs: do not allow relocation of partially dropped subvolumes

2025-09-09 CVE-2025-39738

mediumMicrosoft MSRC 2025-W37

btrfs: don't check PageError in __extent_writepage

2025-09-09 CVE-2023-53429

mediumMicrosoft MSRC 2025-W37

btrfs: fix deadlock when aborting transaction during relocation with scrub

2025-09-09 CVE-2023-53348

mediumMicrosoft MSRC 2025-W37

btrfs: fix use-after-free of new block group that became unused

2025-09-09 CVE-2023-53187

highMicrosoft MSRC 2025-W37

btrfs: qgroup: fix race between quota disable and quota rescan ioctl

2025-09-09 CVE-2025-39759

mediumMicrosoft MSRC 2025-W37

btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand

2025-09-09 CVE-2023-53247

mediumMicrosoft MSRC 2025-W37

btrfs: subpage: keep TOWRITE tag until folio is cleaned

2025-09-09 CVE-2025-39779

mediumMicrosoft MSRC 2025-W37

bus: mhi: host: Detect events pointing to unexpected TREs

2025-09-09 CVE-2025-39790

highMicrosoft MSRC 2025-W37

cacheinfo: Fix shared_cpu_map to handle shared caches at different levels

2025-09-09 CVE-2023-53254

highMicrosoft MSRC 2025-W37

can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB

2025-09-09 CVE-2025-39873

highMicrosoft MSRC 2025-W37

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-54108

highMicrosoft MSRC 2025-W37

cifs: prevent NULL pointer dereference in UTF16 conversion

2025-09-09 CVE-2025-39838

highMicrosoft MSRC 2025-W37

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking

2025-09-09 CVE-2025-57052

criticalMicrosoft MSRC 2025-W37

clk: mediatek: fix of_iomap memory leak

2025-09-09 CVE-2023-53424

mediumMicrosoft MSRC 2025-W37