Week: 2025-W11

HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

2025-03-11 CVE-2025-2310

HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow

2025-03-11 CVE-2025-2308

HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow

2025-03-11 CVE-2025-2309

Header parser of http stream wrapper does not handle folded headers

2025-03-11 CVE-2025-1217

Hercules Augeas fa.c re_case_expand null pointer dereference

2025-03-11 CVE-2025-2588

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

2025-03-11 CVE-2025-22870

ibmvnic: Don't reference skb after sending to VIOS

2025-03-11 CVE-2025-21855

Improper Input Validation in Vim

2025-03-11 CVE-2025-27423

In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the a

2025-03-11 CVE-2025-30258

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

2025-03-11 CVE-2025-27220

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any lim

2025-03-11 CVE-2025-27219

In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained e

2025-03-11 CVE-2025-27221

io_uring: prevent opcode speculation

2025-03-11 CVE-2025-21863

iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE

2025-03-11 CVE-2025-21833

ipvlan: ensure network headers are in skb linear part

2025-03-11 CVE-2025-21891

Jinja sandbox breakout through attr filter selecting format method

2025-03-11 CVE-2025-27516

jwt-go allows excessive memory allocation during header parsing

2025-03-11 CVE-2025-30204

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24046

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24066

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24067

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24995

KEX init error results with excessive memory usage

2025-03-11 CVE-2025-30211

Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference

2025-03-11 CVE-2025-3010

KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()

2025-03-11 CVE-2024-58083

KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

2025-03-11 CVE-2025-21839

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

2025-03-11 CVE-2024-8176

libxml streams use wrong content-type header when requesting a redirected resource

2025-03-11 CVE-2025-1219

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted

2025-03-11 CVE-2025-25724

MapUrlToZone Security Feature Bypass Vulnerability

2025-03-11 CVE-2025-21247

MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.

2025-03-11 CVE-2023-52971

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transform

2025-03-11 CVE-2023-52970

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_

2025-03-11 CVE-2023-52969

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, pot

2025-03-11 CVE-2025-27810

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbe

2025-03-11 CVE-2025-27809

Memory Exhaustion in Expr Parser with Unrestricted Input

2025-03-11 CVE-2025-29786

Microsoft Access Remote Code Execution Vulnerability

2025-03-11 CVE-2025-26630

Microsoft Dataverse Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24053

Microsoft Dataverse Remote Code Execution Vulnerability

2025-03-11 CVE-2025-29807

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

2025-03-11 CVE-2025-29806

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2025-03-11 CVE-2025-26643

Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-29795

Microsoft Excel Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24075

Microsoft Excel Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24081

Microsoft Excel Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24082

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24072

Microsoft Management Console Security Feature Bypass Vulnerability

2025-03-11 CVE-2025-26633

Microsoft Office Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24057

Microsoft Office Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24080

Microsoft Office Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24083

Microsoft Office Remote Code Execution Vulnerability

2025-03-11 CVE-2025-26629

Microsoft Partner Center Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-29814

criticalMicrosoft MSRC 2025-W11

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24076

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24994

Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

2025-03-11 CVE-2025-24985

Microsoft Windows File Explorer Spoofing Vulnerability

2025-03-11 CVE-2025-24071

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

2025-03-11 CVE-2025-26633

criticalMicrosoft CVE 2025-W11

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

2025-03-11 CVE-2025-24993

Microsoft Windows NTFS Information Disclosure Vulnerability

2025-03-11 CVE-2025-24984

Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

2025-03-11 CVE-2025-24991