CVE-2025-13227 is a type confusion vulnerability in the V8 JavaScript engine used by Google Chrome versions prior to 142.0.7444.59. This flaw could allow a remote attacker to potentially exploit heap corruption by delivering a crafted HTML page. The vulnerability is categorized under CWE-843 (Type Confusion). There is no CVSS score provided, and no known exploits in the wild have been reported. The affected products include Microsoft-related software and Azure Linux 3.0, as well as nodejs. Patch status is not confirmed due to lack of vendor advisory details or patch links.
CVE-2025-39850 addresses a null pointer dereference (NPD) vulnerability in the vxlan component related to the arp and neigh reduce functions when using nexthop objects. This vulnerability affects specific Linux kernel versions and can lead to system instability or crashes. Multiple Linux kernel vulnerabilities, including this one, were fixed in updates released by Ubuntu in March 2026. The vulnerability is rated medium severity and has a patch available.
A deadlock vulnerability exists in the rcu_read_unlock() function due to IRQ work handling in certain Microsoft-related Linux kernel versions. This issue can cause a deadloop, impacting system stability. The vulnerability affects specific Linux kernel versions listed in the affectedVersions field. A patch is available to address this flaw. There are no known exploits in the wild. The severity is assessed as medium based on the potential impact on system operation.
This vulnerability involves the ACPI APEI subsystem sending a SIGBUS signal to the current task if a synchronous memory error is not recovered. It affects specific versions of Microsoft-related software. The issue has been addressed with available patches. The vulnerability is rated medium severity and no known exploits are reported in the wild.
CVE-2025-39748 is a medium severity vulnerability affecting certain Linux kernel versions related to the BPF subsystem. The issue involves improper handling of ranges when refining tnum after JSET operations. Multiple specific Linux kernel versions prior to 5.15.0-186.196 and several exact versions in the 3.11 to 3.13 series are affected. A patch is available to address this vulnerability. There are no known exploits in the wild at this time.
A race condition vulnerability exists in the btrfs filesystem's quota group (qgroup) feature, specifically between quota disable and quota rescan ioctl operations. This vulnerability affects certain Linux kernel versions and could potentially lead to system compromise. A patch is available to address this issue.
CVE-2025-39789 is a medium severity vulnerability affecting specific versions of Microsoft software related to the crypto x86/aegis component. The issue involves missing error checks in the code, which could potentially lead to unexpected behavior. The affected versions are explicitly listed and include multiple builds of versions 4.15.0, 5.0.0, and 5.3.0. There is no information provided about active exploitation or a CVSS score. No patch or remediation details are included in the available data.
A medium severity vulnerability identified as CVE-2025-39747 affects specific versions of Microsoft software. The issue relates to error handling for krealloc in metadata setup within the drm/msm subsystem. A patch is available to address this vulnerability. There are no known exploits in the wild. The vendor advisory references a broader Linux kernel security update addressing multiple issues but does not provide detailed exploitation scenarios for this specific vulnerability.
This vulnerability involves the ath10k WiFi driver shutting down when hardware is unreliable. It is identified as CVE-2025-39746 and affects specific versions of the Microsoft product. The issue is categorized as medium severity. A patch is available to address this vulnerability. The vendor advisory references a broader Linux kernel security update but does not provide detailed remediation steps specific to this vulnerability.
CVE-2025-39762 is a medium severity vulnerability involving a missing null pointer check in the drm/amd/display component. This flaw could potentially lead to issues such as crashes or undefined behavior due to dereferencing null pointers. The vulnerability affects specific versions of the Microsoft product listed. No known exploits are reported in the wild, and there is no explicit patch or remediation information provided.
CVE-2025-39754 is a medium severity vulnerability involving a race condition between smaps_hugetlb_range and migration in certain Microsoft-related software versions. It relates to a concurrency issue (CWE-362) that could affect memory management. The affected versions are specific builds of version 4.4.0. No patch or remediation details are provided in the available data.
This vulnerability involves the btrfs filesystem subpage handling where the TOWRITE tag is kept until the folio is cleaned. It is part of a set of Linux kernel security issues addressed in a security update. The vulnerability affects specific Linux kernel versions and has a medium severity rating. A patch is available to fix this issue. The vendor advisory references a broader Linux kernel security update that addresses multiple vulnerabilities across various subsystems and architectures.
CVE-2025-39764 is a medium severity vulnerability related to netfilter's ctnetlink component involving removal of refcounting in expectation dumpers. It affects multiple specific Linux kernel versions and related distributions. The vulnerability is addressed by available patches. The vendor advisory references a broader set of Linux kernel security fixes but does not provide detailed exploitation or impact specifics for this CVE. No known exploits are reported in the wild.
Multiple security issues were discovered in the Linux kernel, including a vulnerability identified as CVE-2025-37842 related to the spi: fsl-qspi driver. These flaws affect various kernel subsystems and architectures and could potentially be used by an attacker to compromise the system. A patch addressing these vulnerabilities is available. The issues impact specific Linux kernel versions as listed in the affectedVersions field.
CVE-2025-37856 addresses a vulnerability in the BTRFS file system related to race conditions in the block_group::bg_list handling. This issue was part of multiple security flaws fixed in the Linux kernel as detailed in the Ubuntu security advisory USN-7594-1. The vulnerability could potentially be exploited to compromise affected systems. A patch is available to mitigate this issue.
Multiple security issues, including a kmemleak warning fix for the BPF percpu hashmap, were addressed in the Linux kernel. These flaws affect various architectures and subsystems, potentially allowing attackers to compromise affected systems. A patch is available that corrects these vulnerabilities across many kernel components.