Threat database

647 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	–	EPSS 0.2%	CVE-2025-39764Microsoft · netfilter: ctnetlink: remove refcounting in expectation dumpers MediumEPSS 0.2%2025-09-13GCVE DatabaseCVE-2025-39764 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-13
Medium	–	EPSS 0.3%	CVE-2025-37842Microsoft · spi: fsl-qspi: use devm function instead of driver remove MediumEPSS 0.3%2025-09-04GCVE DatabaseCVE-2025-37842 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-04
Low	–	EPSS 0.3%	CVE-2025-37822Microsoft · riscv: uprobes: Add missing fence.i after building the XOL buffer LowEPSS 0.3%2025-09-04GCVE DatabaseCVE-2025-37822 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-04
Medium	–	EPSS 0.3%	CVE-2025-37882Microsoft · usb: xhci: Fix isochronous Ring Underrun/Overrun event handling MediumEPSS 0.3%2025-09-04GCVE DatabaseCVE-2025-37882 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-04
Medium	–	EPSS 0.3%	CVE-2025-37856Microsoft · btrfs: harden block_group::bg_list against list_del() races MediumEPSS 0.3%2025-09-04GCVE DatabaseCVE-2025-37856 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-04
Medium	–	EPSS 0.2%	CVE-2025-22026Microsoft · nfsd: don't ignore the return code of svc_proc_register() MediumEPSS 0.2%2025-09-04GCVE DatabaseCVE-2025-22026 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-04
Medium	–	EPSS 0.2%	CVE-2025-37807Microsoft · bpf: Fix kmemleak warning for percpu hashmap MediumEPSS 0.2%2025-09-04GCVE DatabaseCVE-2025-37807 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-04
Medium	–	EPSS 1.1%	CVE-2024-24784Microsoft · Comments in display names are incorrectly handled in net/mail MediumEPSS 1.1%2025-09-03GCVE DatabaseCVE-2024-24784 CVE-2024-24784 is a vulnerability in the net/mail component where comments in display names are incorrectly handled. The available information does not provide technical details beyond this description or the impact of the vulnerability. No CVSS score or exploit details are provided. No patch or remediation information is available from the vendor advisory. The affected versions include specific versions 2.0 and 3.0, as well as references to Microsoft and Azure Linux products, but exact versioning details are unclear. EPSS 1.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.2%	CVE-2025-22105Microsoft · bonding: check xdp prog when set bond mode MediumEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-22105 CVE-2025-22105 is a medium severity vulnerability affecting specific versions of the Linux kernel related to the bonding driver, specifically involving checks for XDP programs when setting bond mode. This vulnerability is part of a broader set of security issues fixed in the Linux kernel as detailed in the Ubuntu security advisory USN-7594-1. The flaw could potentially be exploited to compromise the system. Multiple Linux kernel versions are affected, and patches have been released to address these issues. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.3%	CVE-2024-56591Microsoft · Bluetooth: hci_conn: Use disable_delayed_work_sync MediumEPSS 0.3%2025-09-03GCVE DatabaseCVE-2024-56591 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.3%	CVE-2025-37877Microsoft · iommu: Clear iommu-dma ops on cleanup MediumEPSS 0.3%2025-09-03GCVE DatabaseCVE-2025-37877 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.2%	CVE-2025-38643Microsoft · wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() MediumEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-38643 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.2%	CVE-2025-37834Microsoft · mm/vmscan: don't try to reclaim hwpoison folio MediumEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-37834 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
High	–	EPSS 0.2%	CVE-2025-38636Microsoft · rv: Use strings in da monitors tracepoints HighEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-38636 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.2%	CVE-2025-38665Microsoft · can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode MediumEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-38665 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.2%	CVE-2025-22113Microsoft · ext4: avoid journaling sb update on error if journal is destroying MediumEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-22113 Multiple security issues, including a vulnerability in the ext4 filesystem related to journaling superblock updates on error conditions, were discovered in the Linux kernel. These issues affect various kernel subsystems and architectures. Updates have been released to address these flaws. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.4%	CVE-2025-38660Microsoft · [ceph] parse_longname(): strrchr() expects NUL-terminated string MediumEPSS 0.4%2025-09-03GCVE DatabaseCVE-2025-38660 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.2%	CVE-2025-38644Microsoft · wifi: mac80211: reject TDLS operations when station is not associated MediumEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-38644 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.2%	CVE-2025-22109Microsoft · ax25: Remove broken autobind MediumEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-22109 Multiple security issues were discovered in the Linux kernel, including a vulnerability identified as CVE-2025-22109 related to the ax25 subsystem's broken autobind feature. These issues affect various kernel subsystems and architectures. An update has been released to address these flaws. The severity of this specific vulnerability is assessed as medium. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.2%	CVE-2025-22107Microsoft · net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() MediumEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-22107 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03

Showing 601–620 of 647 results