Week: 2025-W11

An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when

2025-03-11 CVE-2024-12905

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to Tru

2025-03-11 CVE-2025-27363

Arbitrary Code Execution via Crafted Keras Config for Model Loading

2025-03-11 CVE-2025-1550

criticalMicrosoft MSRC 2025-W11

ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers

2025-03-11 CVE-2025-21870

ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()

2025-03-11 CVE-2025-21847

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24070

atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain type

2025-03-11 CVE-2025-31160

Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-21199

Azure Arc Installer Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-26627

Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24049

Azure Health Bot Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-21384

Azure Playwright Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-26683

Azure Promptflow Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24986

bnxt: Do not read past the end of test names

2025-03-11 CVE-2023-53010

bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

2025-03-11 CVE-2025-21867

bpf: avoid holding freeze_mutex during mmap operation

2025-03-11 CVE-2025-21853

bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT

2025-03-11 CVE-2025-21825

bpf: Fix deadlock when freeing cgroup storage

2025-03-11 CVE-2024-58088

btrfs: fix double accounting race when btrfs_run_delalloc_range() failed

2025-03-11 CVE-2024-58089

cifs: fix potential memory leaks in session setup

2025-03-11 CVE-2023-53008

cifs.upcall makes an upcall to the wrong namespace in containerized environments

2025-03-11 CVE-2025-2312

containerd has an integer overflow in User ID handling

2025-03-11 CVE-2024-40635

cpufreq: CPPC: Add u64 casts to avoid overflowing

2025-03-11 CVE-2022-49750

DirectX Graphics Kernel File Denial of Service Vulnerability

2025-03-11 CVE-2025-24997

drm/amdkfd: Add sync after creating vram bo

2025-03-11 CVE-2023-53009

drm/i915: Fix a memory leak with reused mmap_offset

2025-03-11 CVE-2023-53002

drm/i915: Fix request ref counting during error capture & debugfs dump

2025-03-11 CVE-2023-52981

drop_monitor: fix incorrect initialization order

2025-03-11 CVE-2025-21862

efi: Don't map the entire mokvar table to determine its size

2025-03-11 CVE-2025-21872

encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data).

2025-03-11 CVE-2025-30348

f2fs: initialize locks earlier in f2fs_fill_super()

2025-03-11 CVE-2022-49742

geneve: Fix use-after-free in geneve_find_dev().

2025-03-11 CVE-2025-21858

Gnuplot: gnuplot segmentation fault on plot3d_points

2025-03-11 CVE-2025-31176

Gnuplot: gnuplot segmentation fault on x11_graphics

2025-03-11 CVE-2025-31181

Gnuplot: gnuplot segmentation fault on xstrftime

2025-03-11 CVE-2025-31179

go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

2025-03-11 CVE-2025-29923

Grub2: fs/bfs: integer overflow in the bfs parser.

2025-03-11 CVE-2024-45778

Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser

2025-03-11 CVE-2024-45779

Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write

2025-03-11 CVE-2025-1125

Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)

2025-03-11 CVE-2024-45782

Grub2: fs/tar: integer overflow causes heap oob write

2025-03-11 CVE-2024-45780

Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

2025-03-11 CVE-2025-0685

Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

2025-03-11 CVE-2025-0684

Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat

2025-03-11 CVE-2025-0686

Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data

2025-03-11 CVE-2025-0678

Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution

2025-03-11 CVE-2025-0689

gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().

2025-03-11 CVE-2025-21865

HDF5 h5 File H5SM.c H5SM_delete heap-based overflow

2025-03-11 CVE-2025-2153

HDF5 H5Faccum.c H5F__accum_free heap-based overflow

2025-03-11 CVE-2025-2915

HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow

2025-03-11 CVE-2025-2923

HDF5 H5FL.c H5FL__blk_gc_list use after free

2025-03-11 CVE-2025-2913

HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow

2025-03-11 CVE-2025-2914

HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow

2025-03-11 CVE-2025-2924

HDF5 H5MM.c H5MM_realloc double free

2025-03-11 CVE-2025-2925

HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference

2025-03-11 CVE-2025-2926