Threat database

647 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	–	EPSS 0.2%	CVE-2025-22125Microsoft · md/raid1,raid10: don't ignore IO flags MediumEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-22125 Multiple security issues were discovered in the Linux kernel, including a vulnerability related to md/raid1 and raid10 IO flags handling. These flaws affect various kernel subsystems and architectures. The issues could potentially allow an attacker to compromise the system. A patch addressing these vulnerabilities is available. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 0.2%	CVE-2025-22103Microsoft · net: fix NULL pointer dereference in l3mdev_l3_rcv MediumEPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-22103 A NULL pointer dereference vulnerability exists in the Linux kernel function l3mdev_l3_rcv, identified as CVE-2025-22103. This vulnerability is classified under CWE-476 and affects multiple specific Linux kernel versions. The issue was addressed in a security update that fixes several kernel subsystems. The vulnerability has medium severity and no known exploits in the wild have been reported. A patch is available to remediate the issue. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 1.0%	CVE-2024-34158Microsoft · Stack exhaustion in Parse in go/build/constraint MediumEPSS 1.0%2025-09-03GCVE DatabaseCVE-2024-34158 CVE-2024-34158 is a vulnerability involving stack exhaustion in the Parse function within the go/build/constraint package. The issue is categorized under CWE-674, which relates to uncontrolled recursion leading to resource exhaustion. The vulnerability affects certain versions of Microsoft-related software including versions 2.0 and 3.0, as well as Azure Linux and CBL Mariner 2.0. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation guidance is currently available from the vendor. EPSS 1.0%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
High	–	EPSS 0.8%	CVE-2024-24787Microsoft · Arbitrary code execution during build on Darwin in cmd/go HighEPSS 0.8%2025-09-03GCVE DatabaseCVE-2024-24787 CVE-2024-24787 is a vulnerability involving arbitrary code execution during the build process on Darwin systems in the cmd/go tool. The information provided is limited and does not include technical details or exploitation methods. No CVSS score is available, and there are no known exploits in the wild. The affected versions are ambiguously listed and include references to Microsoft products and versions 2.0 and 3.0, but the exact affected software versions are unclear. No patch or remediation information is provided. EPSS 0.8%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-09-03
Medium	–	EPSS 1.4%	CVE-2025-25199Microsoft · BCryptGenerateSymmetricKey memory leak MediumEPSS 1.4%2025-07-11GCVE DatabaseCVE-2025-25199 CVE-2025-25199 is a memory leak vulnerability related to the BCryptGenerateSymmetricKey function in Microsoft software. The vulnerability is categorized under CWE-401, indicating improper release of memory. No CVSS score or detailed technical exploitation information is provided. There is no indication of known exploits in the wild or an official patch available at this time. EPSS 1.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-07-11
Medium	–	EPSS 0.2%	CVE-2024-58098Microsoft · bpf: track changes_pkt_data property for global functions MediumEPSS 0.2%2025-07-11GCVE DatabaseCVE-2024-58098 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-07-11
Medium	–	EPSS 0.2%	CVE-2024-58100Microsoft · bpf: check changes_pkt_data property for extension programs MediumEPSS 0.2%2025-07-11GCVE DatabaseCVE-2024-58100 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-07-11
Medium	–	EPSS 0.2%	CVE-2024-58237Microsoft · bpf: consider that tail calls invalidate packet pointers MediumEPSS 0.2%2025-07-11GCVE DatabaseCVE-2024-58237 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-07-11
Medium	–	EPSS 0.2%	CVE-2025-22057Microsoft · net: decrease cached dst counters in dst_release MediumEPSS 0.2%2025-07-11GCVE DatabaseCVE-2025-22057 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-07-11
Low	–	EPSS 0.2%	CVE-2025-37800Microsoft · driver core: fix potential NULL pointer dereference in dev_uevent() LowEPSS 0.2%2025-07-11GCVE DatabaseCVE-2025-37800 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-07-11
Medium	–	EPSS 0.3%	CVE-2025-37852Microsoft · drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() MediumEPSS 0.3%2025-07-11GCVE DatabaseCVE-2025-37852 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-07-11
Medium	–	EPSS 0.3%	CVE-2025-37853Microsoft · drm/amdkfd: debugfs hang_hws skip GPU with MES MediumEPSS 0.3%2025-07-11GCVE DatabaseCVE-2025-37853 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-07-11
Medium	–	EPSS 0.3%	CVE-2025-37878Microsoft · perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init MediumEPSS 0.3%2025-07-11GCVE DatabaseCVE-2025-37878 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-07-11
Unrated	–	EPSS 0.8%	CVE-2024-58266Microsoft · The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection. UnratedEPSS 0.8%2025-07-02GCVE DatabaseCVE-2024-58266 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.8%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-07-02
High	–	EPSS 0.5%	CVE-2025-32387Microsoft · Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow HighEPSS 0.5%2025-05-27GCVE DatabaseCVE-2025-32387 A vulnerability in Helm allows a specially crafted JSON schema to cause a stack overflow. This issue affects specific versions of the product and is identified as CVE-2025-32387. No CVSS score or detailed technical exploitation information is currently available. No patch or remediation guidance has been provided yet by the vendor. EPSS 0.5%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-05-27
High	–	EPSS 0.5%	CVE-2025-23167Microsoft · A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit ... HighEPSS 0.5%2025-05-02GCVE DatabaseCVE-2025-23167 CVE-2025-23167 is a vulnerability in Node.js 20's HTTP parser where HTTP/1 headers can be improperly terminated using '\r\n\rX' instead of the required '\r\n\r\n'. This inconsistency enables HTTP request smuggling, potentially allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The vulnerability affects certain Microsoft products including Azure Linux versions 2.0 and 3.0. No CVSS score or patch information is currently available, and there are no known exploits in the wild at this time. EPSS 0.5%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-05-02
High	–	EPSS 0.2%	CVE-2024-56604Microsoft · Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() HighEPSS 0.2%2025-03-13GCVE DatabaseCVE-2024-56604 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-03-13
Medium	–	EPSS 0.6%	CVE-2025-1149Microsoft · GNU Binutils ld xmalloc.c xstrdup memory leak MediumEPSS 0.6%2025-02-02GCVE DatabaseCVE-2025-1149 CVE-2025-1149 is a memory leak vulnerability in GNU Binutils ld related to the xmalloc.c xstrdup function. The vulnerability is categorized under CWE-401 (Improper Release of Memory). There is no CVSS score available, no known exploits in the wild, and no patch or remediation information provided. The affected products include Microsoft and Azure Linux versions 2.0 and 3.0. The vendor advisory does not provide specific remediation guidance or confirm patch availability. Due to the lack of detailed impact or exploitation information, the severity is assessed as medium. EPSS 0.6%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-02-02
Unrated	–	EPSS 0.6%	CVE-2025-1152Microsoft · GNU Binutils ld xstrdup.c xstrdup memory leak UnratedEPSS 0.6%2025-02-02GCVE DatabaseCVE-2025-1152 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.6%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-02-02
Unrated	–	EPSS 0.6%	CVE-2025-1151Microsoft · GNU Binutils ld xmemdup.c xmemdup memory leak UnratedEPSS 0.6%2025-02-02GCVE DatabaseCVE-2025-1151 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.6%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-02-02

Showing 621–640 of 647 results