# CVEs published 2025-08-16

95 CVEs were published on August 16, 2025: 8 critical, 34 high. Days are UTC.

- [CVE-2025-9089](https://cve.now/CVE-2025-9089.md): Tenda AC20 SetIpMacBind sub\_48E628 stack-based overflow (CVSS 8.7, Tenda AC20)
- [CVE-2025-9088](https://cve.now/CVE-2025-9088.md): Tenda AC20 formSetVirtualSer save\_virtualser\_data stack-based overflow (CVSS 8.7, Tenda AC20)
- [CVE-2025-9087](https://cve.now/CVE-2025-9087.md): Tenda AC20 SetNetControlList Endpoint set\_qosMib\_list stack-based overflow (CVSS 8.7, Tenda AC20)
- [CVE-2023-3867](https://cve.now/CVE-2023-3867.md): ksmbd: fix out of bounds read in smb2\_sess\_setup (CVSS 9.1, Linux)
- [CVE-2023-4130](https://cve.now/CVE-2023-4130.md): ksmbd: fix wrong next length validation of ea buffer in smb2\_set\_ea() (CVSS 8.1, Linux)
- [CVE-2023-3866](https://cve.now/CVE-2023-3866.md): ksmbd: validate session id and tree id in the compound request (CVSS 7.5, Linux)
- [CVE-2023-3865](https://cve.now/CVE-2023-3865.md): ksmbd: fix out-of-bound read in smb2\_write (CVSS 8.1, Linux)
- [CVE-2023-4515](https://cve.now/CVE-2023-4515.md): ksmbd: validate command request size (CVSS 9.1, Linux)
- [CVE-2023-32249](https://cve.now/CVE-2023-32249.md): ksmbd: not allow guest user on multichannel (CVSS 9.1, Linux)
- [CVE-2023-32246](https://cve.now/CVE-2023-32246.md): ksmbd: call rcu\_barrier() in ksmbd\_server\_exit() (no CVSS, Linux)
- [CVE-2025-38552](https://cve.now/CVE-2025-38552.md): mptcp: plug races between subflow fail and subflow creation (CVSS 9.4, Linux)
- [CVE-2025-38551](https://cve.now/CVE-2025-38551.md): virtio-net: fix recursived rtnl\_lock() during probe() (no CVSS, Linux)
- [CVE-2025-38550](https://cve.now/CVE-2025-38550.md): ipv6: mcast: Delay put pmc-\>idev in mld\_del\_delrec() (CVSS 7.8, Linux)
- [CVE-2025-38549](https://cve.now/CVE-2025-38549.md): efivarfs: Fix memory leak of efivarfs\_fs\_info in fs\_context error paths (no CVSS, Linux)
- [CVE-2025-38548](https://cve.now/CVE-2025-38548.md): hwmon: (corsair-cpro) Validate the size of the received input buffer (no CVSS, Linux)
- [CVE-2025-38547](https://cve.now/CVE-2025-38547.md): iio: adc: axp20x\_adc: Add missing sentinel to AXP717 ADC channel maps (CVSS 7.3, Linux)
- [CVE-2025-38546](https://cve.now/CVE-2025-38546.md): atm: clip: Fix memory leak of struct clip\_vcc. (no CVSS, Linux)
- [CVE-2025-38545](https://cve.now/CVE-2025-38545.md): net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb\_shared\_info (CVSS 7.5, Linux)
- [CVE-2025-38544](https://cve.now/CVE-2025-38544.md): rxrpc: Fix bug due to prealloc collision (no CVSS, Linux)
- [CVE-2025-38543](https://cve.now/CVE-2025-38543.md): drm/tegra: nvdec: Fix dma\_alloc\_coherent error check (no CVSS, Linux)
- [CVE-2025-38542](https://cve.now/CVE-2025-38542.md): net: appletalk: Fix device refcount leak in atrtr\_create() (CVSS 7.8, Linux)
- [CVE-2025-38541](https://cve.now/CVE-2025-38541.md): wifi: mt76: mt7925: Fix null-ptr-deref in mt7925\_thermal\_init() (no CVSS, Linux)
- [CVE-2025-38540](https://cve.now/CVE-2025-38540.md): HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (no CVSS, Linux)
- [CVE-2025-38539](https://cve.now/CVE-2025-38539.md): tracing: Add down\_write(trace\_event\_sem) when adding trace event (CVSS 7.8, Linux)
- [CVE-2025-38538](https://cve.now/CVE-2025-38538.md): dmaengine: nbpfaxi: Fix memory corruption in probe() (no CVSS, Linux)
- [CVE-2025-38537](https://cve.now/CVE-2025-38537.md): net: phy: Don't register LEDs for genphy (no CVSS, Linux)
- [CVE-2025-38536](https://cve.now/CVE-2025-38536.md): net: airoha: fix potential use-after-free in airoha\_npu\_get() (CVSS 7.8, Linux)
- [CVE-2025-38535](https://cve.now/CVE-2025-38535.md): phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (no CVSS, Linux)
- [CVE-2025-38534](https://cve.now/CVE-2025-38534.md): netfs: Fix copy-to-cache so that it performs collection with ceph+fscache (no CVSS, Linux)
- [CVE-2025-38533](https://cve.now/CVE-2025-38533.md): net: libwx: fix the using of Rx buffer DMA (CVSS 9.8, Linux)
- [CVE-2025-38532](https://cve.now/CVE-2025-38532.md): net: libwx: properly reset Rx ring descriptor (CVSS 7.8, Linux)
- [CVE-2025-38531](https://cve.now/CVE-2025-38531.md): iio: common: st\_sensors: Fix use of uninitialize device structs (no CVSS, Linux)
- [CVE-2025-38530](https://cve.now/CVE-2025-38530.md): comedi: pcl812: Fix bit shift out of bounds (no CVSS, Linux)
- [CVE-2025-38529](https://cve.now/CVE-2025-38529.md): comedi: aio\_iiro\_16: Fix bit shift out of bounds (no CVSS, Linux)
- [CVE-2025-38528](https://cve.now/CVE-2025-38528.md): bpf: Reject %p% format string in bprintf-like helpers (CVSS 7.1, Linux)
- [CVE-2025-38527](https://cve.now/CVE-2025-38527.md): smb: client: fix use-after-free in cifs\_oplock\_break (CVSS 9.8, Linux)
- [CVE-2025-38526](https://cve.now/CVE-2025-38526.md): ice: add NULL check in eswitch lag check (CVSS 7.5, Linux)
- [CVE-2025-38525](https://cve.now/CVE-2025-38525.md): rxrpc: Fix irq-disabled in local\_bh\_enable() (CVSS 7.5, Linux)
- [CVE-2025-38524](https://cve.now/CVE-2025-38524.md): rxrpc: Fix recv-recv race of completed call (CVSS 7.5, Linux)
- [CVE-2025-38523](https://cve.now/CVE-2025-38523.md): cifs: Fix the smbd\_response slab to allow usercopy (CVSS 7.5, Linux)
- [CVE-2025-38522](https://cve.now/CVE-2025-38522.md): sched/ext: Prevent update\_locked\_rq() calls with NULL rq (no CVSS, Linux)
- [CVE-2025-8143](https://cve.now/CVE-2025-8143.md): Soledad \<= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml\_smartlists\_h' (CVSS 6.4, pencidesign Soledad)
- [CVE-2025-8105](https://cve.now/CVE-2025-8105.md): Soledad \<= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3, pencidesign Soledad)
- [CVE-2025-8878](https://cve.now/CVE-2025-8878.md): Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress \<= 4.16.4 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5, properfraction Paid Membership Plugin, Ecommerce, User Regi…)
- [CVE-2025-8142](https://cve.now/CVE-2025-8142.md): Soledad \<= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header\_layout' (CVSS 8.8, pencidesign Soledad)
- [CVE-2025-38521](https://cve.now/CVE-2025-38521.md): drm/imagination: Fix kernel crash when hard resetting the GPU (no CVSS, Linux)
- [CVE-2025-38520](https://cve.now/CVE-2025-38520.md): drm/amdkfd: Don't call mmput from MMU notifier callback (no CVSS, Linux)
- [CVE-2025-38519](https://cve.now/CVE-2025-38519.md): mm/damon: fix divide by zero in damon\_get\_intervals\_score() (no CVSS, Linux)
- [CVE-2025-38518](https://cve.now/CVE-2025-38518.md): x86/CPU/AMD: Disable INVLPGB on Zen2 (no CVSS, Linux)
- [CVE-2025-38517](https://cve.now/CVE-2025-38517.md): lib/alloc\_tag: do not acquire non-existent lock in alloc\_tag\_top\_users() (no CVSS, Linux)
- [CVE-2025-38516](https://cve.now/CVE-2025-38516.md): pinctrl: qcom: msm: mark certain pins as invalid for interrupts (no CVSS, Linux)
- [CVE-2025-38515](https://cve.now/CVE-2025-38515.md): drm/sched: Increment job count before swapping tail spsc queue (no CVSS, Linux)
- [CVE-2025-38514](https://cve.now/CVE-2025-38514.md): rxrpc: Fix oops due to non-existence of prealloc backlog struct (CVSS 7.5, Linux)
- [CVE-2025-38513](https://cve.now/CVE-2025-38513.md): wifi: zd1211rw: Fix potential NULL pointer dereference in zd\_mac\_tx\_to\_dev() (no CVSS, Linux)
- [CVE-2025-38512](https://cve.now/CVE-2025-38512.md): wifi: prevent A-MSDU attacks in mesh networks (CVSS 8.8, Linux)
- [CVE-2025-38511](https://cve.now/CVE-2025-38511.md): drm/xe/pf: Clear all LMTT pages on alloc (CVSS 8.8, Linux)
- [CVE-2025-38510](https://cve.now/CVE-2025-38510.md): kasan: remove kasan\_find\_vm\_area() to prevent possible deadlock (no CVSS, Linux)
- [CVE-2025-38509](https://cve.now/CVE-2025-38509.md): wifi: mac80211: reject VHT opmode for unsupported channel widths (no CVSS, Linux)
- [CVE-2025-38508](https://cve.now/CVE-2025-38508.md): x86/sev: Use TSC\_FACTOR for Secure TSC frequency calculation (CVSS 7.3, Linux)
- [CVE-2025-38507](https://cve.now/CVE-2025-38507.md): HID: nintendo: avoid bluetooth suspend/resume stalls (no CVSS, Linux)
- [CVE-2025-38506](https://cve.now/CVE-2025-38506.md): KVM: Allow CPU to reschedule while setting per-page memory attributes (no CVSS, Linux)
- [CVE-2025-38505](https://cve.now/CVE-2025-38505.md): wifi: mwifiex: discard erroneous disassoc frames on STA interface (CVSS 7.1, Linux)
- [CVE-2025-38504](https://cve.now/CVE-2025-38504.md): io\_uring/zcrx: fix pp destruction warnings (no CVSS, Linux)
- [CVE-2025-38503](https://cve.now/CVE-2025-38503.md): btrfs: fix assertion when building free space tree (no CVSS, Linux)
- [CVE-2025-9092](https://cve.now/CVE-2025-9092.md): Hybrid Module Deployment in Multi-JVM Environments Leading to Resource Exhaustion (CVSS 1.0, Legion of the Bouncy Castle Bouncy Castle for Java - BC-FJA…)
- [CVE-2025-38502](https://cve.now/CVE-2025-38502.md): bpf: Fix oob access in cgroup local storage (CVSS 7.8, Linux)
- [CVE-2025-8719](https://cve.now/CVE-2025-8719.md): Translate This - Google Translate Web Element Shortcode \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via base\_lang Parameter (CVSS 6.4, reubenthiessen Translate This gTranslate Shortcode)
- [CVE-2025-7499](https://cve.now/CVE-2025-7499.md): BetterDocs \<= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure (CVSS 5.3, wpdevteam BetterDocs – Knowledge Base Docs & FAQ Solution…)
- [CVE-2025-8464](https://cve.now/CVE-2025-8464.md): Drag and Drop Multiple File Upload for Contact Form 7 \<= 1.3.9.0 - Directory Traversal via \`wpcf7\_guest\_user\_id\` Cookie (CVSS 5.3, glenwpcoder Drag and Drop Multiple File Upload for Contact…)
- [CVE-2025-8898](https://cve.now/CVE-2025-8898.md): Taxi Booking Manager for Woocommerce | E-cab \<= 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover (CVSS 9.8, magepeopleteam E-cab Taxi Booking Manager for Woocommerce)
- [CVE-2025-8089](https://cve.now/CVE-2025-8089.md): Advanced iFrame \<= 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4, mdempfle Advanced iFrame)
- [CVE-2025-8896](https://cve.now/CVE-2025-8896.md): User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor \<= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4, cozmoslabs User Profile Builder – Beautiful User Registrati…)
- [CVE-2025-8113](https://cve.now/CVE-2025-8113.md): Ebook Store \< 5.8015 - Reflected XSS via $\_SERVER\['REQUEST\_URI'\] (CVSS 6.1, Ebook Store)
- [CVE-2025-38501](https://cve.now/CVE-2025-38501.md): ksmbd: limit repeated connections from clients with the same IP (CVSS 7.5, Linux)
- [CVE-2025-7686](https://cve.now/CVE-2025-7686.md): weichuncai(WP伪春菜) \<= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, lmyoaoa weichuncai)
- [CVE-2025-8293](https://cve.now/CVE-2025-8293.md): Intl DateTime Calendar \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter (CVSS 6.4, Theerawat Patthawee Intl DateTime Calendar)
- [CVE-2025-6079](https://cve.now/CVE-2025-6079.md): School Management System \<= 93.2.0 - Authenticated (Student+) Arbitrary File Upload (CVSS 8.8, dasinfomedia School Management System for Wordpress)
- [CVE-2024-8393](https://cve.now/CVE-2024-8393.md): Woocommerce Blocks – Woolook \<= 1.7.0 - Authenticated (Admin+) Local File Inclusion (CVSS 6.6, delabon Woocommerce Blocks – Woolook)
- [CVE-2025-7439](https://cve.now/CVE-2025-7439.md): Anber Elementor Addon \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner button link (CVSS 6.4, yeashir Anber Elementor Addon)
- [CVE-2025-7683](https://cve.now/CVE-2025-7683.md): LatestCheckins \<= 1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, janyksteenbeek LatestCheckins)
- [CVE-2025-7441](https://cve.now/CVE-2025-7441.md): StoryChief \<= 1.0.42 - Unauthenticated Arbitrary File Upload (CVSS 9.8, StoryChief)
- [CVE-2025-7668](https://cve.now/CVE-2025-7668.md): Linux Promotional Plugin \<= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, timothyja Linux Promotional Plugin)
- [CVE-2025-7664](https://cve.now/CVE-2025-7664.md): Al Pack \<= 1.1.1 - Missing Authorization to Unauthenticated Premium Feature Activation via check\_activate\_permission Function (CVSS 7.5, loword AL Pack)
- [CVE-2025-6080](https://cve.now/CVE-2025-6080.md): WPGYM \<= 67.7.0 - Missing Authorization to Admin Account Creation (CVSS 8.8, dasinfomedia WPGYM - Wordpress Gym Management System)
- [CVE-2025-7440](https://cve.now/CVE-2025-7440.md): Anber Elementor Addon \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Carousel button link (CVSS 6.4, yeashir Anber Elementor Addon)
- [CVE-2025-3671](https://cve.now/CVE-2025-3671.md): WPGYM - Wordpress Gym Management System \<= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update (CVSS 8.8, dasinfomedia WPGYM - Wordpress Gym Management System)
- [CVE-2025-7649](https://cve.now/CVE-2025-7649.md): Surbma | Recent Comments Shortcode \<= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Surbma | Recent Comments Shortcode)
- [CVE-2025-7651](https://cve.now/CVE-2025-7651.md): Earnware Connect \<= 1.0.74 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Earnware Connect)
- [CVE-2025-7684](https://cve.now/CVE-2025-7684.md): Last.fm Recent Album Artwork \<= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, remysharp Last.fm Recent Album Artwork)
- [CVE-2025-6221](https://cve.now/CVE-2025-6221.md): Embed Bokun \<= 0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parameter (CVSS 6.4, luuptek Embed Bokun)
- [CVE-2024-12612](https://cve.now/CVE-2024-12612.md): School Management System for Wordpress \<= 93.2.0 - Unauthenticated SQL Injection (CVSS 7.5, dasinfomedia School Management System for Wordpress)
- [CVE-2025-49895](https://cve.now/CVE-2025-49895.md): WordPress ServerBuddy by PluginBuddy.com plugin \<= 1.0.5 - CSRF to PHP Object Injection vulnerability (CVSS 6.5, iThemes ServerBuddy by PluginBuddy.com)
- [CVE-2024-12575](https://cve.now/CVE-2024-12575.md): Poll Maker – Versus Polls, Anonymous Polls, Image Polls \<= 5.8.9 - Unauthenticated Basic Information Exposure (CVSS 5.3, ays-pro Poll Maker – Versus Polls, Anonymous Polls, Image P…)
- [CVE-2025-55284](https://cve.now/CVE-2025-55284.md): Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code (CVSS 7.1, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2025-55286](https://cve.now/CVE-2025-55286.md): z2d OOB drawing with new multi-sample anti-aliasing could lead to invalid memory access and corruption (CVSS 7.3, vancluever z2d)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-08-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.