CVEs published November 4, 2025
257 CVEs were published on November 4, 2025: 10 critical, 93 high.
- Published
- 257
- Critical
- 10
- High
- 93
- Medium
- 146
- Low
- 8
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 151
Most affected products
- Apple macOS
- 35
- CanalDenuncia.app
- 15
- Apple Safari · Apple iOS and iPadOS +4
- 14
- Qualcomm Snapdragon
- 13
- Apple iOS and iPadOS
- 12
- MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- 12
- Apple iOS and iPadOS · Apple macOS +3
- 11
- Apple iOS and iPadOS · Apple macOS +2
- 10
- Apple iOS and iPadOS · Apple macOS
- 7
- Apple Safari · Apple iOS and iPadOS +3
- 6
Critical 10
- CVE-2025-12108Missing Authentication for Critical Function Survision License Plate Recognition CameraSurvision License Plate Recognition Camera
- CVE-2025-61956Missing Authentication for Critical Function in Radiometrics VizAirRadiometrics VizAir
- CVE-2025-54863Insufficiently Protected Credentials in Radiometrics VizAirRadiometrics VizAir
- CVE-2025-61945Missing Authentication for Critical Function in Radiometrics VizAirRadiometrics VizAir
- CVE-2025-12682Easy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Uploadfahadmahmood Easy Upload Files During Checkout
- CVE-2025-12493ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'devitemsllc ShopLentor – All-in-One WooCommerce Growth & St…
- CVE-2025-12158Simple User Capabilities <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationtanvirahmed1984 Simple User Capabilities
- CVE-2025-11008CE21 Suite <= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalationce21com CE21 Suite
- CVE-2025-11007CE21 Suite 2.2.1 - 2.3.1 - Missing Authorization to Unauthenticated Privilege Escalation via Plugin Settings Updatece21com CE21 Suite
- CVE-2025-52910An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400.
High 93
- CVE-2025-64110Cursor: Authentication Bypass Possible via New Cursorignore Writecursor
- CVE-2025-64109Cursor CLI Beta: Command Injection via Untrusted MCP Configurationcursor
- CVE-2025-64108Cursor's Sensitive File Modification can Lead to NTFS Path Quirkscursor
- CVE-2025-64107Cursor is Vulnerable to Path Manipulation Using Backslashes on Windowscursor
- CVE-2025-64106Cursor: Speedbump Modal Bypass in MCP Server Deep-Linkcursor
- CVE-2025-59595CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12.Absolute Secure Access
- CVE-2025-62722LinkAce: Stored XSS Vulnerability in Link Title Field Through Social Media Sharing FeatureKovah LinkAce
- CVE-2025-62721LinkAce: Authorization Bypass Allows Unauthorized Access to All Private Links, Lists, and TagsKovah LinkAce
- CVE-2025-62720LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private LinksKovah LinkAce
- CVE-2025-54526Fuji Electric Monitouch V-SFT-6 Stack-based Buffer OverflowFuji Electric Monitouch V-SFT-6
- CVE-2025-54496Fuji Electric Monitouch V-SFT-6 Heap-based Buffer OverflowFuji Electric Monitouch V-SFT-6
- CVE-2025-62507Redis: Bug in XACKDEL may lead to stack overflow and potential RCEredis
- CVE-2025-62369Xibo CMS: Remote Code Execution through module templatesxibosignage xibo-cms
- CVE-2025-47776MantisBT: Authentication bypass for some passwords due to PHP type jugglingmantisbt · mantisbt/mantisbt
- CVE-2025-32786GLPI Inventory Plugin is Vulnerable to Unauthenticated SQL Injectionglpi-project glpi-inventory-plugin
- CVE-2025-23358NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue.NVIDIA NVApp
- CVE-2025-41345Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41344Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41343Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41342Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41341Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41340Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41339Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41338Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41337Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41336Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41335Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41114Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41113Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41112Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-41111Missing Authorization vulnerability in CanalDenuncia.appCanalDenuncia.app
- CVE-2025-11690IDOR vulnerability in the CFMOTO RIDE APICFMOTO RIDE
- CVE-2025-20742In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT…
- CVE-2025-20737In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20735In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20733In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20728In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT7902, MT7920, MT7921, MT7922, MT7925, MT7927
- CVE-2025-20725In ims service, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, M…
- CVE-2025-20726In Modem, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, M…
- CVE-2025-20727In Modem, there is a possible out of bounds write due to a heap buffer overflow.MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, M…
- CVE-2025-11733Footnotes Made Easy <= 3.0.7 - Unauthenticated Stored Cross-Site Scriptinglumiblog Footnotes Made Easy
- CVE-2025-11704Elegance Menu <= 1.9 - Authenticated (Contributor+) Local File Inclusionimpacttechlab Elegance Menu
- CVE-2025-11724EM Beer Manager <= 3.2.3 - Authenticated (Subscriber+) Arbitrary File Uploaderinmorelli EM Beer Manager
- CVE-2025-11890Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypassbeycanpress Crypto Payment Gateway with Payeer for WooComme…
- CVE-2025-10896Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Uploadlitonice13 Image Comparison Addon for Elementor · litoni… +2
- CVE-2025-47368Buffer Over-read in DSP ServiceQualcomm Snapdragon
- CVE-2025-47367Out-of-bounds Write in WinBlast DriverQualcomm Snapdragon
- CVE-2025-47365Integer Overflow or Wraparound in Automotive PlatformQualcomm Snapdragon
- CVE-2025-47361Improper Validation of Array Index in Automotive Software platform based on QNXQualcomm Snapdragon
- CVE-2025-47360Stack-based Buffer Overflow in Automotive Software platform based on QNXQualcomm Snapdragon
- CVE-2025-47357Missing Authentication for Critical Function in SMSSQualcomm Snapdragon
- CVE-2025-47353Exposed Dangerous Method or Function in Automotive Software platform based on QNXQualcomm Snapdragon
- CVE-2025-47352Improper Validation of Array Index in AudioQualcomm Snapdragon
- CVE-2025-27074Incorrect Calculation of Buffer Size in SCE-MinkQualcomm Snapdragon
- CVE-2025-27070Out-of-bounds Write in Windows ComputeQualcomm Snapdragon
- CVE-2025-43373The issue was addressed with improved memory handling.Apple macOS
- CVE-2025-43502A privacy issue was addressed by removing sensitive data.Apple Safari · Apple iOS and iPadOS +2
- CVE-2025-43386An out-of-bounds access issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43387A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43450A logic issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2025-43407This issue was addressed with improved entitlements.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43431The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43364A race condition was addressed with additional validation.Apple macOS
- CVE-2025-43338An out-of-bounds access issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43436A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43476A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43323This issue was addressed with additional entitlement checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43505An out-of-bounds write issue was addressed with improved input validation.Apple Xcode
- CVE-2025-43401A denial-of-service issue was addressed with improved validation.Apple macOS
- CVE-2025-43496The issue was addressed by adding additional logic.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43480The issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43361An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43376A logic issue was addressed with improved state management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43399This issue was addressed with improved redaction of sensitive information.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43419The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43462The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43474An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2025-43454This issue was addressed through improved state management.Apple iOS and iPadOS
- CVE-2025-43449The issue was addressed with improved handling of caches.Apple iOS and iPadOS
- CVE-2025-43500A privacy issue was addressed with improved handling of user preferences.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43405A permissions issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2025-43413An access issue was addressed with additional sandbox restrictions.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43433The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43472A validation issue was addressed with improved input sanitization.Apple macOS
- CVE-2024-56426An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2
- CVE-2025-49494An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 9110, Modem 51
- CVE-2025-52512An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500.
- CVE-2025-52513An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500.
- CVE-2025-54323An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and
- CVE-2025-54329An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380
- CVE-2025-54332An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025.
- CVE-2025-54334An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500.
- CVE-2025-56230Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.
Medium, low and unrated 154
- CVE-2025-59596CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14Absolute Security Secure Access
- CVE-2025-62719LinkAce: Limited Server-Side Request Forgery (SSRF) in Keyword Fetching FunctionalityKovah LinkAce
- CVE-2025-62715ClipBucket v5: Stored XSS via Collection TagsMacWarrior clipbucket-v5
- CVE-2025-62520MantisBT unauthorized disclosure of private project column configurationmantisbt · mantisbt/mantisbt
- CVE-2025-55155MantisBT: Authentication bypass for some passwords due to PHP type jugglingmantisbt · mantisbt/mantisbt
- CVE-2025-48884Galette is vulnerable to XSS through Document Typegalette
- CVE-2025-48076Galette is vulnerable to Cross-site Scriptinggalette
- CVE-2025-33176NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adNVIDIA RunAI
- CVE-2025-64322Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable CSalesforce Agentforce Vibes Extension
- CVE-2025-64321Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating WriteableSalesforce Agentforce Vibes Extension
- CVE-2025-64320Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This isSalesforce Agentforce Vibes Extension
- CVE-2025-64319Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating WriteabSalesforce Mulesoft Anypoint Code Builder
- CVE-2025-64318Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating WriteSalesforce Mulesoft Anypoint Code Builder
- CVE-2025-10875Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.ThiSalesforce Mulesoft Anypoint Code Builder
- CVE-2025-12184MeetingList <= 0.11 - Authenticated (Admin+) Stored Cross-Site Scriptingrboatright MeetingList
- CVE-2025-12695Insecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandboxdspy
- CVE-2025-12045Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomythemeisle Orbit Fox: Duplicate Page, Menu Icons, SVG Suppor…
- CVE-2025-20749In charger, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT…
- CVE-2025-20748In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20741In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20747In gnss service, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT2718, MT2737, MT6835, MT6878, MT6886, MT6897, MT…
- CVE-2025-20746In gnss service, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT2718, MT2737, MT6835, MT6878, MT6886, MT6897, MT…
- CVE-2025-20739In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20738In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20736In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20734In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20732In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20731In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20729In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20745In apusys, there is a possible memory corruption due to use after free.MediaTek MT2718, MT6989, MT6991, MT8370, MT8390, MT8395, MT…
- CVE-2025-20744In pda, there is a possible escalation of privilege due to use after free.MediaTek MT6899, MT6991, MT8793
- CVE-2025-20743In clkdbg, there is a possible escalation of privilege due to use after free.MediaTek MT2718, MT6761, MT6765, MT6768, MT6781, MT6853, MT…
- CVE-2025-20740In wlan STA driver, there is a possible out of bounds read due to a race condition.MediaTek MT7902, MT7920, MT7921, MT7922, MT7925, MT7927
- CVE-2025-20730In preloader, there is a possible escalation of privilege due to an insecure default value.MediaTek MT2737, MT6739, MT6761, MT6765, MT6768, MT6781, MT…
- CVE-2025-12396Clubmember <= 0.2 - Authenticated (Admin+) Stored Cross-Site Scriptingalaminopu clubmember
- CVE-2025-11812Reuse Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcoderedq Reuse Builder
- CVE-2025-12403Associados Amazon Plugin <= 0.8 - Cross-Site Request Forgery to Stored Cross-Site Scriptingrevokee Associados Amazon Plugin
- CVE-2025-11753Multi-language Responsive Portfolio WordPress <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scriptingaugustinfotech Bootstrap Multi-language Responsive Portfolio
- CVE-2025-12452Visit Counter 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scriptingbestiadurmiente Visit Counter
- CVE-2025-12065WP Carticon <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site ScriptingWP Carticon
- CVE-2025-12371Nari Accountant <= 1.0.12 - Authenticated (Editor+) Stored Cross-Site Scriptingshakhi Nari Accountant
- CVE-2025-12389Import Export For WooCommerce <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Updatesidngr Import Export For WooCommerce
- CVE-2025-12402LinkedIn Resume <= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scriptingbondnono LinkedIn Resume
- CVE-2025-12415MapMap <= 1.1 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scriptingsugiartha MapMap
- CVE-2025-12156Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One 2.0.7 - 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Post Creationaitool Ai Auto Tool Content Writing Assistant (Gemini Write…
- CVE-2025-12456Centangle Team Showcase <= 1.0.0 - Cross-Site Request Forgery To Plugin's Settings Modification And Stored Cross-Site ScriptingCentangle-Team
- CVE-2025-12400LMB^Box Smileys <= 3.2 - Cross-Site Request Forgery to Stored Cross-Site Scriptinglmbbox LMB^Box Smileys
- CVE-2025-12369Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scriptinghupe13 Extensions for Leaflet Map
- CVE-2025-12157Simple User Capabilities <= 1.0 - Missing Authorization to Unauthenticated Capability Resettanvirahmed1984 Simple User Capabilities
- CVE-2025-12410SH Contextual Help <= 3.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scriptingsamhoamt SH Contextual Help
- CVE-2025-11758All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposurecodebangers All in One Time Clock Lite – Tracking Employee…
- CVE-2025-12413Social Media WPCF7 Stop Words <= 1.1.3 - Cross-Site Request Forgery to Settings Updatesocialmedialtd WPCF7 Stop words
- CVE-2025-12350DominoKit <= 1.1.0 - Missing Authorization to Unauthenticated Settings Updatedomiinodev DominoKit
- CVE-2025-12393Free Quotation <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scriptingkris_iv Free Quotation
- CVE-2025-12416Pagerank Tools <= 1.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scriptingmahype Pagerank tools
- CVE-2025-12412Top Bar Notification <= 1.12 - Cross-Site Request Forgery to Stored Cross-Site Scriptingjosereyev Top Bar Notification
- CVE-2025-12188Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Updatewpmasterscom Posts Navigation Links for Sections and Headin…
- CVE-2025-12683NULL DACL assigned to Named Pipe communicating with SYSTEM ServiceVoidtools Everything
- CVE-2025-12069WP Global Screen Options <= 0.2 - Cross-Site Request Forgery to Screen Options Updatestiand WP Global Screen Options
- CVE-2025-12401Label Plugins <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scriptingtheode Label Plugins
- CVE-2025-12070ViaAds <= 2.1.2 - Cross-Site Request Forgery to API Key UpdateViaAds
- CVE-2025-47370Reachable Assertion in BT ControllerQualcomm Snapdragon
- CVE-2025-47362Buffer Over-read in Automotive Software platform based on QNXQualcomm Snapdragon
- CVE-2025-27064Buffer Over-read in Core ServicesQualcomm Snapdragon
- CVE-2025-12324TablePress – Tables in WordPress made easy <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributestobiasbg TablePress – Tables in WordPress made easy
- CVE-2025-11841Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributeswpsoul Greenshift – animation and page builder blocks
- CVE-2025-43365A denial-of-service issue was addressed with improved input validation.Apple iOS and iPadOS
- CVE-2025-43430This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43426A logging issue was addressed with improved data redaction.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43390A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.Apple macOS
- CVE-2025-43447The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43345A correctness issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43493The issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +2
- CVE-2025-43411This issue was addressed with additional entitlement checks.Apple macOS
- CVE-2025-43446This issue was addressed with improved validation of symlinks.Apple macOS
- CVE-2025-43503An inconsistent user interface issue was addressed with improved state management.Apple Safari · Apple iOS and iPadOS +3
- CVE-2025-43391A privacy issue was addressed with improved handling of temporary files.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43309A logic issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2025-43427This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +3
- CVE-2025-43348A logic issue was addressed with improved validation.Apple macOS
- CVE-2025-43396A logic issue was addressed with improved checks.Apple macOS
- CVE-2025-43379This issue was addressed with improved validation of symlinks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43457A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +3
- CVE-2025-43441The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +3
- CVE-2025-43504A buffer overflow was addressed with improved bounds checking.Apple Xcode
- CVE-2025-43380An out-of-bounds write issue was addressed with improved input validation.Apple macOS
- CVE-2025-43288This issue was addressed with improved validation of symlinks.Apple macOS
- CVE-2025-43322A logic issue was addressed with improved checks.Apple macOS
- CVE-2025-43334This issue was addressed with additional entitlement checks.Apple macOS
- CVE-2025-43420A race condition was addressed with improved state handling.Apple macOS
- CVE-2025-43498An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +1
- CVE-2025-43477A privacy issue was addressed with improved private data redaction for log entries.Apple macOS
- CVE-2025-43499This issue was addressed with additional entitlement checks.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43421Multiple issues were addressed by disabling array allocation sinking.Apple Safari · Apple iOS and iPadOS +2
- CVE-2025-43460A logic issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2025-43335The issue was addressed by adding additional logic.Apple macOS
- CVE-2025-43495The issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2025-43440This issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43397A permissions issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2025-43378A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43479A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43438A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +3
- CVE-2025-43382A parsing issue in the handling of directory paths was addressed with improved path validation.Apple macOS
- CVE-2025-43414A permissions issue was addressed with improved validation.Apple macOS
- CVE-2025-43443This issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43455A privacy issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43394This issue was addressed with improved handling of symlinks.Apple macOS
- CVE-2025-43422The issue was addressed by adding additional logic.Apple iOS and iPadOS
- CVE-2025-43434A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +3
- CVE-2025-43336A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43459An authentication issue was addressed with improved state management.Apple watchOS
- CVE-2025-43377An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43398The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43458This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43360The issue was addressed with improved UI.Apple iOS and iPadOS
- CVE-2025-43435The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43423A logging issue was addressed with improved data redaction.Apple iOS and iPadOS · Apple macOS +1
- CVE-2025-43395This issue was addressed with improved handling of symlinks.Apple macOS
- CVE-2025-43507A privacy issue was addressed by moving sensitive data.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43442A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS
- CVE-2025-43383An out-of-bounds access issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43481This issue was addressed with improved checks.Apple macOS
- CVE-2025-43439A privacy issue was addressed by removing sensitive data.Apple iOS and iPadOS · Apple visionOS
- CVE-2025-43478A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2025-43424The issue was addressed with improved bounds checks.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43432A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43408This issue was addressed by restricting options offered on a locked device.Apple macOS
- CVE-2025-43469A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43384An out-of-bounds access issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43412A file quarantine bypass was addressed with additional checks.Apple macOS
- CVE-2025-43445An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43392The issue was addressed with improved handling of caches.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43452This issue was addressed by restricting options offered on a locked device.Apple iOS and iPadOS
- CVE-2025-43444A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43385An out-of-bounds access issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43468A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.Apple macOS
- CVE-2025-43429A buffer overflow was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43350A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS
- CVE-2025-43409A permissions issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2025-43448This issue was addressed with improved validation of symlinks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43389A privacy issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +1
- CVE-2025-43425The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-35021Abilis CPX Fallback Shell Connection RelayAbilis CPX
- CVE-2025-46556MantisBT is Vulnerable to Denial-of-Service (DoS) attack via Excessive Note Lengthmantisbt · mantisbt/mantisbt
- CVE-2025-27374An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 10
- CVE-2025-54325An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W92
- CVE-2025-54327An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W1000.
- CVE-2025-54330An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025.
- CVE-2025-54331An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025.
- CVE-2025-54333An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025.
- CVE-2025-54335An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500.
- CVE-2025-60925codeshare v1.0.0 was discovered to contain an information leakage vulnerability.
- CVE-2025-61431A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity and Infinit
- CVE-2025-63294WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions.