CVEs published June 8, 2025
33 CVEs were published on June 8, 2025: 1 critical, 21 high.
- Published
- 33
- Critical
- 1
- High
- 21
- Medium
- 4
- Low
- 7
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- OpenHarmony
- 11
- ON Semiconductor Quantenna Wi-Fi chipset
- 8
- Microhard IPn4Gii / Bullet-LTE Firmware
- 7
- Tenda AC15
- 4
- Linux
- 2
- Tenda AC9
- 1
Critical 1
High 21
- CVE-2025-5851Tenda AC15 HTTP POST Request AdvSetLanip fromadvsetlanip buffer overflowTenda AC15
- CVE-2025-5850Tenda AC15 HTTP POST Request SetLEDCf formsetschedled buffer overflowTenda AC15
- CVE-2025-5849Tenda AC15 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflowTenda AC15
- CVE-2025-5848Tenda AC15 HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflowTenda AC15
- CVE-2025-35010Microhard Bullet-LTE and IPn4Gii AT+MNPINGTM Argument InjectionMicrohard IPn4Gii / Bullet-LTE Firmware
- CVE-2025-35009Microhard Bullet-LTE and IPn4Gii AT+MNNETSP Argument InjectionMicrohard IPn4Gii / Bullet-LTE Firmware
- CVE-2025-35008Microhard Bullet-LTE and IPn4Gii AT+MMNAME Argument InjectionMicrohard IPn4Gii / Bullet-LTE Firmware
- CVE-2025-35007Microhard Bullet-LTE and IPn4Gii AT+MFRULE Argument InjectionMicrohard IPn4Gii / Bullet-LTE Firmware
- CVE-2025-35006Microhard Bullet-LTE and IPn4Gii AT+MFPORTFWD Argument InjectionMicrohard IPn4Gii / Bullet-LTE Firmware
- CVE-2025-35005Microhard Bullet-LTE and IPn4Gii AT+MFMAC Argument InjectionMicrohard IPn4Gii / Bullet-LTE Firmware
- CVE-2025-35004Microhard Bullet-LTE and IPn4Gii AT+MFIP Argument InjectionMicrohard IPn4Gii / Bullet-LTE Firmware
- CVE-2025-32459ON Semiconductor Quantenna router_command.sh (in the sync_time argument) Argument InjectionON Semiconductor Quantenna Wi-Fi chipset
- CVE-2025-32458ON Semiconductor Quantenna router_command.sh (in the get_syslog_from_qtn argument) Argument InjectionON Semiconductor Quantenna Wi-Fi chipset
- CVE-2025-32457ON Semiconductor Quantenna router_command.sh (in the get_file_from_qtn argument) Argument InjectionON Semiconductor Quantenna Wi-Fi chipset
- CVE-2025-32456ON Semiconductor Quantenna router_command.sh (in the put_file_to_qtn argument) Argument InjectionON Semiconductor Quantenna Wi-Fi chipset
- CVE-2025-32455ON Semiconductor Quantenna router_command.sh (in the run_cmd argument) Argument InjectionON Semiconductor Quantenna Wi-Fi chipset
- CVE-2025-3460ON Semiconductor Quantenna set_tx_pow Argument InjectionON Semiconductor Quantenna Wi-Fi chipset
- CVE-2025-3459ON Semiconductor Quantenna transmit_file Argument InjectionON Semiconductor Quantenna Wi-Fi chipset
- CVE-2025-5847Tenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflowTenda AC9
- CVE-2025-38004can: bcm: add locking for bcm_op runtime updatesLinux
- CVE-2025-38003can: bcm: add missing rcu read protection for procfs contentLinux
Medium, low and unrated 11
- CVE-2025-27247Pasteboard has an improper preservation of permissions vulnerabilityOpenHarmony
- CVE-2025-27242Ssecurity_component_manager has an improper input vulnerabilityOpenHarmony
- CVE-2025-27563security_access_token has an improper preservation of permissions vulnerabilityOpenHarmony
- CVE-2025-26693security_access_token has an improper preservation of permissions vulnerabilityOpenHarmony
- CVE-2025-26691telephony_call_manager has an improper preservation of permissions vulnerabilityOpenHarmony
- CVE-2025-27131kernel_liteos_m has an improper input vulnerabilityOpenHarmony
- CVE-2025-24493kernel_liteos_a has a race condition vulnerabilityOpenHarmony
- CVE-2025-25217arkui_ace_enginehas a NULL pointer dereference vulnerabilityOpenHarmony
- CVE-2025-23235arkcompiler_ets_runtime has an out-of-bounds write vulnerabilityOpenHarmony
- CVE-2025-21082arkui_ace_engine has a type confusion vulnerabilityOpenHarmony
- CVE-2025-20063arkui_ace_engine has a type confusion vulnerabilityOpenHarmony