Security Warnings — Week: 2025-W28

LibTIFF thumbnail.c setrow buffer overflow

2025-07-08 CVE-2025-8177

mediumMicrosoft MSRC 2025-W28

LibTIFF tiffmedian.c get_histogram use after free

2025-07-08 CVE-2025-8176

mediumMicrosoft MSRC 2025-W28

Libxslt: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

2025-07-08 CVE-2025-7425

highMicrosoft MSRC 2025-W28

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

2025-07-08 CVE-2025-7424

highMicrosoft MSRC 2025-W28

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

2025-07-08 CVE-2024-25178

criticalMicrosoft MSRC 2025-W28

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

2025-07-08 CVE-2024-25177

highMicrosoft MSRC 2025-W28

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

2025-07-08 CVE-2024-25176

criticalMicrosoft MSRC 2025-W28

maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()

2025-07-08 CVE-2025-38364

mediumMicrosoft MSRC 2025-W28

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, o

2025-07-08 CVE-2025-52496

highMicrosoft MSRC 2025-W28

md/raid1: Fix stack memory use after return in raid1_reshape

2025-07-08 CVE-2025-38445

highMicrosoft MSRC 2025-W28

media: cxusb: no longer judge rbuf when the write fails

2025-07-08 CVE-2025-38229

highMicrosoft MSRC 2025-W28

media: imx-jpeg: Cleanup after an allocation error

2025-07-08 CVE-2025-38225

mediumMicrosoft MSRC 2025-W28

media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()

2025-07-08 CVE-2025-38237

highMicrosoft MSRC 2025-W28

media: vidtv: Terminating the subsequent process of initialization failure

2025-07-08 CVE-2025-38227

mediumMicrosoft MSRC 2025-W28

media: vivid: Change the siize of the composing

2025-07-08 CVE-2025-38226

mediumMicrosoft MSRC 2025-W28

Memory Allocation with Excessive Size Value in Wireshark

2025-07-08 CVE-2023-5371

mediumMicrosoft MSRC 2025-W28

Microsoft Brokering File System Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49677

highMicrosoft MSRC 2025-W28

Microsoft Brokering File System Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49693

highMicrosoft MSRC 2025-W28

Microsoft Brokering File System Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49694

highMicrosoft MSRC 2025-W28

Microsoft Configuration Manager Remote Code Execution Vulnerability

2025-07-08 CVE-2025-47178

highMicrosoft MSRC 2025-W28

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

2025-07-08 CVE-2025-49741

highMicrosoft MSRC 2025-W28

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49713

highMicrosoft MSRC 2025-W28

Microsoft Excel Information Disclosure Vulnerability

2025-07-08 CVE-2025-48812

mediumMicrosoft MSRC 2025-W28

Microsoft Excel Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49711

highMicrosoft MSRC 2025-W28

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

2025-07-08 CVE-2025-48805

highMicrosoft MSRC 2025-W28

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

2025-07-08 CVE-2025-48806

highMicrosoft MSRC 2025-W28

Microsoft Office Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47994

highMicrosoft MSRC 2025-W28

Microsoft Office Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49695

highMicrosoft MSRC 2025-W28

Microsoft Office Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49696

highMicrosoft MSRC 2025-W28

Microsoft Office Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49697

highMicrosoft MSRC 2025-W28

Microsoft Office Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49699

highMicrosoft MSRC 2025-W28

Microsoft Office Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49702

highMicrosoft MSRC 2025-W28

Microsoft PC Manager Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47993

highMicrosoft MSRC 2025-W28

Microsoft PC Manager Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49738

highMicrosoft MSRC 2025-W28

Microsoft PowerPoint Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49705

highMicrosoft MSRC 2025-W28

Microsoft Purview Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-53762

highMicrosoft MSRC 2025-W28

Microsoft SharePoint Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49701

highMicrosoft MSRC 2025-W28

Microsoft SharePoint Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49704

highMicrosoft MSRC 2025-W28

Microsoft SharePoint Server Remote Code Execution Vulnerability

2025-07-08 CVE-2025-53770

criticalMicrosoft MSRC 2025-W28

Microsoft SharePoint Server Spoofing Vulnerability

2025-07-08 CVE-2025-49706

mediumMicrosoft MSRC 2025-W28

Microsoft SharePoint Server Spoofing Vulnerability

2025-07-08 CVE-2025-53771

mediumMicrosoft MSRC 2025-W28

Microsoft SQL Server Information Disclosure Vulnerability

2025-07-08 CVE-2025-49718

highMicrosoft MSRC 2025-W28

Microsoft SQL Server Information Disclosure Vulnerability

2025-07-08 CVE-2025-49719

highMicrosoft MSRC 2025-W28

Microsoft SQL Server Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49717

highMicrosoft MSRC 2025-W28

Microsoft Teams Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49731

lowMicrosoft MSRC 2025-W28

Microsoft Teams Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49737

highMicrosoft MSRC 2025-W28

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47971

highMicrosoft MSRC 2025-W28

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47973

highMicrosoft MSRC 2025-W28

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49689

highMicrosoft MSRC 2025-W28

Microsoft Virtual Hard Disk Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49683

highMicrosoft MSRC 2025-W28

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49730

highMicrosoft MSRC 2025-W28

Microsoft Word Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49698

highMicrosoft MSRC 2025-W28

Microsoft Word Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49700

highMicrosoft MSRC 2025-W28

Microsoft Word Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49703

highMicrosoft MSRC 2025-W28

misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()

2025-07-08 CVE-2025-38368

mediumMicrosoft MSRC 2025-W28

mm: fix uprobe pte be overwritten when expanding vma

2025-07-08 CVE-2025-38207

mediumMicrosoft MSRC 2025-W28

mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write

2025-07-08 CVE-2025-38258

mediumMicrosoft MSRC 2025-W28

mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().

2025-07-08 CVE-2025-38324

lowMicrosoft MSRC 2025-W28

mptcp: make fallback action and fallback decision atomic

2025-07-08 CVE-2025-38491

highMicrosoft MSRC 2025-W28

mruby nregs codegen.c scope_new heap-based overflow

2025-07-08 CVE-2025-7207

lowMicrosoft MSRC 2025-W28