CVE-2025-64506 LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images
Published December 4, 2025
Information published.
Microsoft Security Response Center Blog Alerts
CVE-2025-66031 node-forge ASN.1 Unbounded Recursion
Published December 4, 2025
Information published.
CVE-2025-66030 node-forge ASN.1 OID Integer Truncation
Published December 4, 2025
Information published.
CVE-2025-12816 CVE-2025-12816
Published December 4, 2025
Information published.
CVE-2025-12977 CVE-2025-12977
Published December 4, 2025
Information published.
CVE-2025-12969 CVE-2025-12969
Published December 4, 2025
Information published.
CVE-2025-39829 trace/fgraph: Fix the warning caused by missing unregister notifier
Published December 4, 2025
Information published.
CVE-2025-39810 bnxt_en: Fix memory corruption when FW resources change during ifdown
Published December 4, 2025
Information published.
CVE-2023-53292 blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
Published December 4, 2025
Information published.
CVE-2025-64660 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
Published November 25, 2025
The following revisions have been made: 1) In the Security Updates table, corrected the impact entries to Remote Code Execution. 2) The CVSS scores have been updated. These are informational changes only. Customers who have successfully installed the update do not need to take any further action.
