CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- No product listedUncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3:...6.8 Medium
- No product listedIncorrect default permissions for the Intel(R) Processor Identification Utility before version 8...5.4 Medium
- intel quickassist technologyNull pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring...6.8 Medium
firmware-nonfreeDebianImproper control of dynamically-managed code resources for some Intel(R) NPU Drivers within Ring...5.1 Mediumfirmware-nonfreeDebianProtection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may...6.8 Medium- No product listedImproper input validation in some firmware for some Intel(R) Graphics Drivers and Intel LTS...2.0 Low
- No product listedUncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before...5.4 Medium
- No product listedImproper link resolution before file access ('link following') for some Intel(R) Server...5.4 Medium
- intel computing improvement programImproper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001...6.0 Medium
- intel computing improvement programUnrestricted upload of file with dangerous type for some Intel(R) CIP software before version...2.0 Low
- intel computing improvement programProtection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001...5.4 Medium
- intel computing improvement programImproper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001...5.7 Medium
- No product listedUncontrolled search path for the Intel(R) System Support Utility before version 4.1.0 within Ring...5.4 Medium
- intel computing improvement programImproper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001...7.7 High
- intel computing improvement programProtection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001...6.0 Medium
- intel quickassist technologyBuffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User...6.8 Medium
- No product listedImproper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within...6.8 Medium
- No product listedImproper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before...5.7 Medium
- No product listedUncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version...5.4 Medium
- No product listedInsecure inherited permissions for some Intel(R) Rapid Storage Technology Application before...5.4 Medium
- intel computing improvement programImproper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within...2.1 Low
- intel computing improvement programImproper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001...2.3 Low
- intel computing improvement programImproper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001...8.7 High
- No product listedImproper access control for some SigTest before version 6.1.10 within Ring 3: User Applications...5.4 Medium
- No product listedSensitive information uncleared in resource before release for reuse for some Intel(R) NPU...2.0 Low
- intel computing improvement programExternal control of file name or path for some Intel(R) CIP software before version WIN_DCA_2.4.0...5.6 Medium
- No product listedUncontrolled search path for some Display Virtualization for Windows OS software before version...5.4 Medium
- No product listedImproper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User...4.8 Medium
- intel computing improvement programUncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within...5.4 Medium
- No product listedUse of unmaintained third party components for some Intel(R) Processor Identification Utility...8.5 High
- nvidia authn component of nvidia aistoreNVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability...8.8 High
- nvidia authn component of nvidia aistoreNVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause...5.3 Medium
- nvidia triton inference serverNVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker...6.5 Medium
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious...7.8 High
- netgear dgn2200v4, dgn2200 firmware +1 moreImproper input validation in NETGEAR DGN2200v46.8 Medium
- netgear rax30, rax30 firmware, raxe300 +1 more +3 moreImproper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE3005.2 Medium
- netgear r6260, r6850, r6260 firmware +1 more +3 moreImproper input validation in NETGEAR R6260 and R68504.8 Medium
- netgear wax610, wax610 firmware, wax610y +1 more +3 moreCredentials recorded in logs in NETGEAR WAX610 and WAX610Y0.5 Low
- nvidia megatron-lmNVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data...7.8 High
- avast antivirus, (free/premiium/ultimeat) antivirus, avg (free/inernet security/ultimate) antivirus +1 more +3 moreDouble fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local...9.9 Critical
- avast free antivirusCollision in minifilter driver of Avast Free Antivirus results in disabling of real-time protection4.4 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 145 and Thunderbird 1458.1 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Audio/Video component8.8 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Workers component8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component8.1 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Notifications component8.1 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU component7.5 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT component9.8 Critical
- Show moreLoading…