Security Warnings — Week: 2025-W46

runc: LSM labels can be bypassed with malicious config using dummy procfs files

2025-11-11 CVE-2025-52881

highMicrosoft MSRC 2025-W46

sctp: Fix MAC comparison to be constant-time

2025-11-11 CVE-2025-40204

highMicrosoft MSRC 2025-W46

smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().

2025-11-11 CVE-2025-40139

highMicrosoft MSRC 2025-W46

smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

2025-11-11 CVE-2025-40168

mediumMicrosoft MSRC 2025-W46

Squashfs: reject negative file sizes in squashfs_read_inode()

2025-11-11 CVE-2025-40200

mediumMicrosoft MSRC 2025-W46

Storvsp.sys Driver Denial of Service Vulnerability

2025-11-11 CVE-2025-60708

mediumMicrosoft MSRC 2025-W46

Timing Side-Channel in PSK Binder Verification

2025-11-11 CVE-2025-11932

mediumMicrosoft MSRC 2025-W46

tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

2025-11-11 CVE-2025-40149

mediumMicrosoft MSRC 2025-W46

tls: wait for pending async decryptions if tls_strp_msg_hold fails

2025-11-11 CVE-2025-40176

highMicrosoft MSRC 2025-W46

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:

2025-11-11 CVE-2025-13226

highMicrosoft MSRC 2025-W46

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:

2025-11-11 CVE-2025-13227

highMicrosoft MSRC 2025-W46

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:

2025-11-11 CVE-2025-13230

highMicrosoft MSRC 2025-W46

UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu

2025-11-11 CVE-2025-2486

highMicrosoft MSRC 2025-W46

usbnet: Fix using smp_processor_id() in preemptible code warnings

2025-11-11 CVE-2025-40164

mediumMicrosoft MSRC 2025-W46

Visual Studio Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62214

mediumMicrosoft MSRC 2025-W46

WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode

2025-11-11 CVE-2025-64713

mediumMicrosoft MSRC 2025-W46

WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction

2025-11-11 CVE-2025-64704

mediumMicrosoft MSRC 2025-W46

Windows Administrator Protection Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60718

highMicrosoft MSRC 2025-W46

Windows Administrator Protection Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60721

highMicrosoft MSRC 2025-W46

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60719

highMicrosoft MSRC 2025-W46

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-62213

highMicrosoft MSRC 2025-W46

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-62217

highMicrosoft MSRC 2025-W46

Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability

2025-11-11 CVE-2025-59513

mediumMicrosoft MSRC 2025-W46

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-59515

highMicrosoft MSRC 2025-W46

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60717

highMicrosoft MSRC 2025-W46

Windows Client-Side Caching Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60705

highMicrosoft MSRC 2025-W46

Windows Common Log File System Driver Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60709

highMicrosoft MSRC 2025-W46

Windows Hyper-V Information Disclosure Vulnerability

2025-11-11 CVE-2025-60706

mediumMicrosoft MSRC 2025-W46

Windows Kerberos Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60704

highMicrosoft MSRC 2025-W46

Windows Kernel Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-62215

highMicrosoft MSRC 2025-W46

Windows License Manager Information Disclosure Vulnerability

2025-11-11 CVE-2025-62208

mediumMicrosoft MSRC 2025-W46

Windows License Manager Information Disclosure Vulnerability

2025-11-11 CVE-2025-62209

mediumMicrosoft MSRC 2025-W46

Windows OLE Remote Code Execution Vulnerability

2025-11-11 CVE-2025-60714

highMicrosoft MSRC 2025-W46

Windows Remote Desktop Services Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60703

highMicrosoft MSRC 2025-W46

Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

2025-11-11 CVE-2025-59510

mediumMicrosoft MSRC 2025-W46

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60713

highMicrosoft MSRC 2025-W46

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2025-11-11 CVE-2025-60715

highMicrosoft MSRC 2025-W46

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62452

highMicrosoft MSRC 2025-W46

Windows Smart Card Reader Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-59505

highMicrosoft MSRC 2025-W46

Windows Speech Recognition Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-59508

highMicrosoft MSRC 2025-W46

Windows Speech Recognition Information Disclosure Vulnerability

2025-11-11 CVE-2025-59509

mediumMicrosoft MSRC 2025-W46

Windows Speech Runtime Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-59507

highMicrosoft MSRC 2025-W46

Windows Subsystem for Linux GUI Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62220

highMicrosoft MSRC 2025-W46

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60720

highMicrosoft MSRC 2025-W46

Windows WLAN Service Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-59511

highMicrosoft MSRC 2025-W46

xtensa: simdisk: add input size check in proc_write_simdisk

2025-11-11 CVE-2025-40193

mediumMicrosoft MSRC 2025-W46

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

2025-11-10 CVE-2025-21042

highSamsung CVE 2025-W46