CVE-2025-40334 drm/amdgpu: validate userq buffer virtual address and size
Published December 11, 2025
Information published.
Microsoft Security Response Center Blog Alerts
CVE-2025-40338 ASoC: Intel: avs: Do not share the name pointer between components
Published December 11, 2025
Information published.
CVE-2025-40336 drm/gpusvm: fix hmm_pfn_to_map_order() usage
Published December 11, 2025
Information published.
CVE-2025-55753 Apache HTTP Server: mod_md (ACME), unintended retry intervals
Published December 11, 2025
Information published.
CVE-2025-58098 Apache HTTP Server: Server Side Includes adds query string to #exec cmd=…
Published December 11, 2025
Information published.
CVE-2025-62408 c-ares has a Use After Free vulnerability when connection is cleaned up after error
Published December 11, 2025
Information published.
CVE-2025-62557 Microsoft Office Remote Code Execution Vulnerability
Published December 10, 2025
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62464 Windows Projected File System Elevation of Privilege Vulnerability
Published December 10, 2025
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
CVE-2025-59516 Windows Storage VSP Driver Elevation of Privilege Vulnerability
Published December 10, 2025
Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-62455 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Published December 10, 2025
Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
