Security Warnings — Week: 2025-W15

Apple macOS: Mehrere Schwachstellen

2025-04-13 CVE-2023-23495

criticalBSI 2025-W15

Juniper Produkte: Mehrere Schwachstellen

2025-04-10 CVE-2016-2183

highBSI 2025-W15

QEMU: Schwachstelle ermöglicht Denial of Service

2025-04-10 CVE-2023-42467

mediumBSI 2025-W15

QEMU: Schwachstelle ermöglicht Denial of Service

2025-04-10 CVE-2023-6683

mediumBSI 2025-W15

Linux Kernel Out-of-Bounds Access Vulnerability

2025-04-09 CVE-2024-53197

highLinux CVE 2025-W15

Linux Kernel Out-of-Bounds Read Vulnerability

2025-04-09 CVE-2024-53150

highLinux CVE 2025-W15

Linux Kernel: Mehrere Schwachstellen

2025-04-09 CVE-2024-0841

mediumBSI 2025-W15

Linux Kernel: Schwachstelle ermöglicht Denial of Service

2025-04-09 CVE-2024-1151

mediumBSI 2025-W15

OpenSC: Mehrere Schwachstellen

2025-04-09 CVE-2023-40661

lowBSI 2025-W15

Samba: Mehrere Schwachstellen

2025-04-09 CVE-2023-3961

mediumBSI 2025-W15

accel/qaic: Fix integer overflow in qaic_validate_req()

2025-04-08 CVE-2025-22001

mediumMicrosoft MSRC 2025-W15

acpi: nfit: fix narrowing conversion in acpi_nfit_ctl

2025-04-08 CVE-2025-22044

mediumMicrosoft MSRC 2025-W15

Active Directory Certificate Services Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-27740

highMicrosoft MSRC 2025-W15

Active Directory Domain Services Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-29810

highMicrosoft MSRC 2025-W15

An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting s

2025-04-08 CVE-2025-3277

criticalMicrosoft MSRC 2025-W15

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.

2025-04-08 CVE-2025-29478

lowMicrosoft MSRC 2025-W15

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.

2025-04-08 CVE-2025-29477

lowMicrosoft MSRC 2025-W15

An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow.

2025-04-08 CVE-2024-52981

mediumMicrosoft MSRC 2025-W15

arcnet: Add NULL check in com20020pci_probe()

2025-04-08 CVE-2025-22054

mediumMicrosoft MSRC 2025-W15

arm64: Don't call NULL in do_compat_alignment_fixup()

2025-04-08 CVE-2025-22033

mediumMicrosoft MSRC 2025-W15

ASoC: codecs: wcd938x: fix incorrect used of portid

2025-04-08 CVE-2022-48716

criticalMicrosoft MSRC 2025-W15

ASoC: imx-card: Add NULL check in imx_card_probe()

2025-04-08 CVE-2025-22066

mediumMicrosoft MSRC 2025-W15

ASP.NET Core and Visual Studio Denial of Service Vulnerability

2025-04-08 CVE-2025-26682

highMicrosoft MSRC 2025-W15

atm: Fix NULL pointer dereference

2025-04-08 CVE-2025-22018

mediumMicrosoft MSRC 2025-W15

ax25: Remove broken autobind

2025-04-08 CVE-2025-22109

mediumMicrosoft MSRC 2025-W15

Azure AI Bot Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-30392

criticalMicrosoft MSRC 2025-W15

Azure Bot Framework SDK Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-30389

highMicrosoft MSRC 2025-W15

Azure Functions Remote Code Execution Vulnerability

2025-04-08 CVE-2025-33074

highMicrosoft MSRC 2025-W15

Azure Local Cluster Information Disclosure Vulnerability

2025-04-08 CVE-2025-25002

mediumMicrosoft MSRC 2025-W15

Azure Local Cluster Information Disclosure Vulnerability

2025-04-08 CVE-2025-26628

highMicrosoft MSRC 2025-W15

Azure Local Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-27489

highMicrosoft MSRC 2025-W15

Azure ML Compute Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-30390

criticalMicrosoft MSRC 2025-W15

Azure Virtual Desktop Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-21416

highMicrosoft MSRC 2025-W15

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()

2025-04-08 CVE-2025-21936

mediumMicrosoft MSRC 2025-W15

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()

2025-04-08 CVE-2025-21937

mediumMicrosoft MSRC 2025-W15

Bluetooth: btnxpuart: Fix kernel panic during FW release

2025-04-08 CVE-2025-22102

mediumMicrosoft MSRC 2025-W15

Bluetooth: Fix error code in chan_alloc_skb_cb()

2025-04-08 CVE-2025-22007

mediumMicrosoft MSRC 2025-W15

Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd

2025-04-08 CVE-2025-21969

mediumMicrosoft MSRC 2025-W15

bnxt_en: Mask the bd_cnt field in the TX BD properly

2025-04-08 CVE-2025-22108

mediumMicrosoft MSRC 2025-W15

bonding: check xdp prog when set bond mode

2025-04-08 CVE-2025-22105

mediumMicrosoft MSRC 2025-W15

btrfs: fix block group refcount race in btrfs_create_pending_block_groups()

2025-04-08 CVE-2025-22115

mediumMicrosoft MSRC 2025-W15

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf.

2025-04-08 CVE-2025-29481

mediumMicrosoft MSRC 2025-W15

bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock

2025-04-08 CVE-2025-21951

mediumMicrosoft MSRC 2025-W15

caif_virtio: fix wrong pointer check in cfv_probe()

2025-04-08 CVE-2025-21904

mediumMicrosoft MSRC 2025-W15

can: ucan: fix out of bound read in strscpy() source

2025-04-08 CVE-2025-22003

mediumMicrosoft MSRC 2025-W15

cdx: Fix possible UAF error in driver_override_show()

2025-04-08 CVE-2025-21915

highMicrosoft MSRC 2025-W15

cifs: Fix integer overflow while processing acdirmax mount option

2025-04-08 CVE-2025-21963

mediumMicrosoft MSRC 2025-W15

cifs: Fix integer overflow while processing acregmax mount option

2025-04-08 CVE-2025-21964

mediumMicrosoft MSRC 2025-W15

cifs: Fix integer overflow while processing closetimeo mount option

2025-04-08 CVE-2025-21962

mediumMicrosoft MSRC 2025-W15

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

2025-04-08 CVE-2023-26819

lowMicrosoft MSRC 2025-W15

clk: samsung: Fix UBSAN panic in samsung_clk_init()

2025-04-08 CVE-2025-39728

mediumMicrosoft MSRC 2025-W15

DirectX Graphics Kernel Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-29812

highMicrosoft MSRC 2025-W15

dlm: prevent NPD when writing a positive value to event_done

2025-04-08 CVE-2025-23131

mediumMicrosoft MSRC 2025-W15

dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature

2025-04-08 CVE-2025-21966

mediumMicrosoft MSRC 2025-W15

drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

2025-04-08 CVE-2025-21941

mediumMicrosoft MSRC 2025-W15

drm/amd/display: Fix out-of-bound accesses

2025-04-08 CVE-2025-21985

mediumMicrosoft MSRC 2025-W15

drm/amd/display: Fix slab-use-after-free on hdcp_work

2025-04-08 CVE-2025-21968

highMicrosoft MSRC 2025-W15

drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV

2025-04-08 CVE-2025-38104

mediumMicrosoft MSRC 2025-W15

drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()

2025-04-08 CVE-2025-21996

mediumMicrosoft MSRC 2025-W15

drm/sched: Fix fence reference count leak

2025-04-08 CVE-2025-21995

mediumMicrosoft MSRC 2025-W15