Threat database

647 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Unrated	–	EPSS 0.2%	CVE-2025-68296Microsoft · drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup UnratedEPSS 0.2%2025-12-02GCVE DatabaseCVE-2025-68296 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-12-02
Medium	–	EPSS 0.2%	CVE-2025-38656Microsoft · wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() MediumEPSS 0.2%2025-11-28GCVE DatabaseCVE-2025-38656 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-11-28
Medium	–	EPSS 0.4%	CVE-2025-37820Microsoft · xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() MediumEPSS 0.4%2025-11-14GCVE DatabaseCVE-2025-37820 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-11-14
Medium	–	EPSS 0.4%	CVE-2025-40168Microsoft · smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). MediumEPSS 0.4%2025-11-13GCVE DatabaseCVE-2025-40168 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-11-13
Medium	–	EPSS 0.2%	CVE-2025-23135Microsoft · RISC-V: KVM: Teardown riscv specific bits after kvm_exit MediumEPSS 0.2%2025-11-06GCVE DatabaseCVE-2025-23135 Multiple security issues were discovered in the Linux kernel, including a vulnerability related to the RISC-V architecture's KVM teardown process. These flaws could potentially allow an attacker to compromise the system. The issues affect various kernel subsystems and architectures, and have been addressed in updated kernel releases. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-11-06
Medium	–	EPSS 0.2%	CVE-2025-22124Microsoft · md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb MediumEPSS 0.2%2025-11-05GCVE DatabaseCVE-2025-22124 A vulnerability identified as CVE-2025-22124 affects certain versions of the Linux kernel related to the md/md-bitmap component, specifically involving an incorrect bitmap_limit for clustermd when writing the superblock. This issue is part of a broader set of security fixes released in the Linux kernel addressing multiple subsystems. The vulnerability has a medium severity rating and patches are available. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-11-05
Medium	–	EPSS 0.2%	CVE-2025-22090Microsoft · x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() MediumEPSS 0.2%2025-11-02GCVE DatabaseCVE-2025-22090 This vulnerability (CVE-2025-22090) involves a flaw in the x86 memory management subsystem of the Linux kernel related to VM_PAT handling when the fork() system call fails in copy_page_range(). It is one of several security issues fixed in the Linux kernel as part of a broad update addressing multiple architectures and subsystems. The issue could potentially be exploited to compromise affected systems. A patch is available to correct this flaw. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-11-02
High	8.8	EPSS 0.3%	CVE-2025-13227Microsoft · Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) High8.8EPSS 0.3%2025-11-02GCVE DatabaseCVE-2025-13227 CVE-2025-13227 is a type confusion vulnerability in the V8 JavaScript engine used by Google Chrome versions prior to 142.0.7444.59. This flaw could allow a remote attacker to potentially exploit heap corruption by delivering a crafted HTML page. The vulnerability is categorized under CWE-843 (Type Confusion). There is no CVSS score provided, and no known exploits in the wild have been reported. The affected products include Microsoft-related software and Azure Linux 3.0, as well as nodejs. Patch status is not confirmed due to lack of vendor advisory details or patch links. EPSS 0.3%Report on CVE-2025-13227 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-11-02
Medium	–	EPSS 0.1%	CVE-2025-39850Microsoft · vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects MediumEPSS 0.1%2025-09-21GCVE DatabaseCVE-2025-39850 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-21
High	–	EPSS 0.2%	CVE-2025-39797Microsoft · xfrm: Duplicate SPI Handling HighEPSS 0.2%2025-09-16GCVE DatabaseCVE-2025-39797 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-16
Medium	–	EPSS 0.2%	CVE-2025-39744Microsoft · rcu: Fix rcu_read_unlock() deadloop due to IRQ work MediumEPSS 0.2%2025-09-13GCVE DatabaseCVE-2025-39744 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13
Medium	–	EPSS 0.2%	CVE-2025-39763Microsoft · ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered MediumEPSS 0.2%2025-09-13GCVE DatabaseCVE-2025-39763 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13
Medium	–	EPSS 0.2%	CVE-2025-39748Microsoft · bpf: Forget ranges when refining tnum after JSET MediumEPSS 0.2%2025-09-13GCVE DatabaseCVE-2025-39748 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13
Medium	–	EPSS 0.1%	CVE-2025-39759Microsoft · btrfs: qgroup: fix race between quota disable and quota rescan ioctl MediumEPSS 0.1%2025-09-13GCVE DatabaseCVE-2025-39759 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13
Medium	–	EPSS 0.2%	CVE-2025-39789Microsoft · crypto: x86/aegis - Add missing error checks MediumEPSS 0.2%2025-09-13GCVE DatabaseCVE-2025-39789 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13
Medium	–	EPSS 0.2%	CVE-2025-39747Microsoft · drm/msm: Add error handling for krealloc in metadata setup MediumEPSS 0.2%2025-09-13GCVE DatabaseCVE-2025-39747 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13
Medium	–	EPSS 0.2%	CVE-2025-39746Microsoft · wifi: ath10k: shutdown driver when hardware is unreliable MediumEPSS 0.2%2025-09-13GCVE DatabaseCVE-2025-39746 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13
Medium	–	EPSS 0.2%	CVE-2025-39762Microsoft · drm/amd/display: add null check MediumEPSS 0.2%2025-09-13GCVE DatabaseCVE-2025-39762 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13
Medium	–	EPSS 0.1%	CVE-2025-39754Microsoft · mm/smaps: fix race between smaps_hugetlb_range and migration MediumEPSS 0.1%2025-09-13GCVE DatabaseCVE-2025-39754 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13
Medium	–	EPSS 0.2%	CVE-2025-39779Microsoft · btrfs: subpage: keep TOWRITE tag until folio is cleaned MediumEPSS 0.2%2025-09-13GCVE DatabaseCVE-2025-39779 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13

Showing 581–600 of 647 results