Security Warnings — Week: 2025-W46

KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes

2025-11-11 CVE-2025-64436

mediumMicrosoft MSRC 2025-W46

KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing

2025-11-11 CVE-2025-64434

mediumMicrosoft MSRC 2025-W46

KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes

2025-11-11 CVE-2025-64437

mediumMicrosoft MSRC 2025-W46

KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation

2025-11-11 CVE-2025-64435

mediumMicrosoft MSRC 2025-W46

LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication

2025-11-11 CVE-2025-64720

highMicrosoft MSRC 2025-W46

LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images

2025-11-11 CVE-2025-64506

mediumMicrosoft MSRC 2025-W46

LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`

2025-11-11 CVE-2025-65018

highMicrosoft MSRC 2025-W46

LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index

2025-11-11 CVE-2025-64505

mediumMicrosoft MSRC 2025-W46

Libvirt: denial of service in xml parsing

2025-11-11 CVE-2025-12748

mediumMicrosoft MSRC 2025-W46

Libvirt: information disclosure via world-readable vm snapshots

2025-11-11 CVE-2025-13193

mediumMicrosoft MSRC 2025-W46

Libxml2: namespace use-after-free in xmlsettreedoc() function of libxml2

2025-11-11 CVE-2025-12863

highMicrosoft MSRC 2025-W46

mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop

2025-11-11 CVE-2025-40180

mediumMicrosoft MSRC 2025-W46

media: mc: Clear minor number before put device

2025-11-11 CVE-2025-40197

mediumMicrosoft MSRC 2025-W46

media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()

2025-11-11 CVE-2025-40207

mediumMicrosoft MSRC 2025-W46

Microsoft Defender Portal Spoofing Vulnerability

2025-11-11 CVE-2025-62459

highMicrosoft MSRC 2025-W46

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

2025-11-11 CVE-2025-62206

mediumMicrosoft MSRC 2025-W46

Microsoft Excel Information Disclosure Vulnerability

2025-11-11 CVE-2025-59240

mediumMicrosoft MSRC 2025-W46

Microsoft Excel Information Disclosure Vulnerability

2025-11-11 CVE-2025-60726

highMicrosoft MSRC 2025-W46

Microsoft Excel Information Disclosure Vulnerability

2025-11-11 CVE-2025-60728

mediumMicrosoft MSRC 2025-W46

Microsoft Excel Information Disclosure Vulnerability

2025-11-11 CVE-2025-62202

highMicrosoft MSRC 2025-W46

Microsoft Excel Remote Code Execution Vulnerability

2025-11-11 CVE-2025-60727

highMicrosoft MSRC 2025-W46

Microsoft Excel Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62200

highMicrosoft MSRC 2025-W46

Microsoft Excel Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62201

highMicrosoft MSRC 2025-W46

Microsoft Excel Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62203

highMicrosoft MSRC 2025-W46

Microsoft Office Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62199

highMicrosoft MSRC 2025-W46

Microsoft Office Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62205

highMicrosoft MSRC 2025-W46

Microsoft Office Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62216

highMicrosoft MSRC 2025-W46

Microsoft OneDrive for Android Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60722

mediumMicrosoft MSRC 2025-W46

Microsoft SharePoint Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62204

highMicrosoft MSRC 2025-W46

Microsoft SQL Server Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-59499

highMicrosoft MSRC 2025-W46

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-59514

highMicrosoft MSRC 2025-W46

Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

2025-11-11 CVE-2025-62449

mediumMicrosoft MSRC 2025-W46

Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-62218

highMicrosoft MSRC 2025-W46

Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-62219

highMicrosoft MSRC 2025-W46

missing SFTP host verification with wolfSSH

2025-11-11 CVE-2025-10966

mediumMicrosoft MSRC 2025-W46

mount: handle NULL values in mnt_ns_release()

2025-11-11 CVE-2025-40195

mediumMicrosoft MSRC 2025-W46

mruby array.c ary_fill_exec out-of-bounds write

2025-11-11 CVE-2025-12875

mediumMicrosoft MSRC 2025-W46

mruby array.c sort_cmp use after free

2025-11-11 CVE-2025-13120

mediumMicrosoft MSRC 2025-W46

Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60707

highMicrosoft MSRC 2025-W46

net: use dst_dev_rcu() in sk_setup_caps()

2025-11-11 CVE-2025-40170

highMicrosoft MSRC 2025-W46

net/ip6_tunnel: Prevent perpetual tunnel growth

2025-11-11 CVE-2025-40173

mediumMicrosoft MSRC 2025-W46

net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()

2025-11-11 CVE-2025-40187

mediumMicrosoft MSRC 2025-W46

netfilter: nft_objref: validate objref and objrefmap expressions

2025-11-11 CVE-2025-40206

mediumMicrosoft MSRC 2025-W46

Node.js: Mehrere Schwachstellen

2025-11-11 CVE-2023-46809

highBSI 2025-W46

Nuance PowerScribe 360 Information Disclosure Vulnerability

2025-11-11 CVE-2025-30398

highMicrosoft MSRC 2025-W46

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git r

2025-11-11 CVE-2025-59777

highMicrosoft MSRC 2025-W46

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git r

2025-11-11 CVE-2025-62689

highMicrosoft MSRC 2025-W46

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

2025-11-11 CVE-2025-58436

mediumMicrosoft MSRC 2025-W46

OpenPrinting CUPS vulnerable to stack based out-of-bound write

2025-11-11 CVE-2025-61915

mediumMicrosoft MSRC 2025-W46

Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()

2025-11-11 CVE-2025-12638

highMicrosoft MSRC 2025-W46

pid: Add a judgment for ns null in pid_nr_ns

2025-11-11 CVE-2025-40178

mediumMicrosoft MSRC 2025-W46

PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege

2025-11-11 CVE-2025-12817

lowMicrosoft MSRC 2025-W46

PostgreSQL libpq undersizes allocations, via integer wraparound

2025-11-11 CVE-2025-12818

mediumMicrosoft MSRC 2025-W46

Potential denial of service in golang.org/x/crypto/ssh/agent

2025-11-11 CVE-2025-47913

highMicrosoft MSRC 2025-W46

Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello

2025-11-11 CVE-2025-11936

mediumMicrosoft MSRC 2025-W46

pwm: berlin: Fix wrong register in suspend/resume

2025-11-11 CVE-2025-40188

mediumMicrosoft MSRC 2025-W46

Revert "ipmi: fix msg stack when IPMI is disconnected"

2025-11-11 CVE-2025-40192

mediumMicrosoft MSRC 2025-W46

Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"

2025-11-11 CVE-2025-40210

mediumMicrosoft MSRC 2025-W46

RGW DoS attack with empty HTTP header in S3 object copy

2025-11-11 CVE-2024-47866

highMicrosoft MSRC 2025-W46

Rsync: Out of bounds array access via negative index

2025-11-11 CVE-2025-10158

mediumMicrosoft MSRC 2025-W46