CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- linuxmedia: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove7.8 High
- linuxmedia: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe4.3 Medium
- linuxmedia: tuner: xc5000: Fix use-after-free in xc5000_release7.3 High
- linuxmedia: rc: fix races with imon_disconnect()7.8 High
- linuxmm: swap: check for stable address space before operating on the VMA7.3 High
- linuxwifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()4.7 Medium
- linuxbpf: Check the helper function is valid in get_helper_proto7.8 High
- linuxcan: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow7.8 High
- linuxcan: hi311x: populate ndo_change_mtu() to prevent buffer overflow7.8 High
- linuxcan: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow7.8 High
- linuxcan: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow7.8 High
- linuxnet: tun: Update napi->skb after XDP process7.8 High
- linuxBluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue8.8 High
- linuxBluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync8.8 High
- linuxBluetooth: MGMT: Fix possible UAFs7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenexthop: Forbid FDB status change while nexthop is in a group6.8 Medium
- linuxnet/mlx5: fs, fix UAF in flow counter release7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreocteontx2-pf: Fix potential use after free in otx2_tc_add_flow()7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morefutex: Prevent use-after-free during requeue-PI7.8 High
- linuxfutex: Use correct exit on failure from futex_hash_allocate_default()7.8 High
- linuxsmb: client: fix wrong index reference in smb2_compound_op()9.8 Critical
- linuxtracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit()No score
- linuxi40e: add validation for ring_len param8.8 High
- linuxi40e: fix idx validation in i40e_validate_queue_map8.8 High
- linuxi40e: fix idx validation in config queues msg8.8 High
- linuxi40e: fix input validation logic for action_meta8.8 High
- linuxi40e: fix validation of VF state in get resources8.8 High
- linuxi40e: add max boundary check for VF filters7.3 High
- linux, linux kernel +1 morefbcon: fix integer overflow in fbcon_do_set_font7.8 High
- linux, linux kernel +1 moreiommufd: Fix race during abort for file descriptors7.8 High
- buffalo inc. wxr9300be6p seriesA path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10....8.6 High
- markomaksym dynamically display postsDynamically Display Posts <= 1.1 - Unauthenticated SQL Injection7.5 High
- apache sparkApache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks6.5 Medium
- wpbakery page builderWPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode6.4 Medium
- wpbakery page builderWPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module6.4 Medium
- rsupport co., ltd. remotecall remote support program (for operator)RemoteCall Remote Support Program (for Operator) versions prior to 5.3.0 contain an uncontrolled...8.5 High
- rsupport co., ltd. remotecall remote support program (for operator)RemoteCall Remote Support Program (for Operator) versions prior to 5.1.0 contain an uncontrolled...8.5 High
- rsupport co., ltd. remoteview pc application consoleRemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path...8.5 High
- unknown blindmatrix e-commerceBlindMatrix e-Commerce < 3.1 - Contributor+ LFI5.5 Medium
- dahua ipc, sd +1 moreA vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with...6.8 Medium
- eclipse threadxImproper Parameter Check in ThreadX Syscall Implementation7.2 High
- ovatheme ova adventOva Advent <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- pebas lisfinity core - lisfinity core plugin used for pebas® lisfinity wordpress themeLisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.4.0 - Unauthenticated Privilege Escalation to Editor7.3 High
- kybernetikservices quick featured imagesQuick Featured Images <= 13.7.2 - Insecure Direct Object Reference to Image Manipulation4.3 Medium
- eclipse threadxMissing check for thread priority5.7 Medium
- 8theme xstoreXStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion8.8 High
- guangzhou smart software co., ltd. smartbiSmartBI RMIServlet Unrestricted File Upload RCE9.2 Critical
- is-human wordpress plugin wordpress pluginWordPress Plugin is-human <= v1.4.2 Eval Injection RCE9.3 Critical
- vesta control panel (cp)VestaCP Debian Installer Malicious Backdoor Supply Chain Compromise9.3 Critical
- valve software source sdk (source-sdk-2013)Valve Source SDK Stack-Based Buffer Overflow RCE9.2 Critical
- Show moreLoading…