CVE-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Published December 12, 2025
Information published.
Microsoft Security Response Center Blog Alerts
CVE-2025-61725 Excessive CPU consumption in ParseAddress in net/mail
Published December 12, 2025
Information published.
CVE-2025-66471 urllib3 Streaming API improperly handles highly compressed data
Published December 11, 2025
Information published.
CVE-2025-66418 urllib3 allows an unbounded number of links in the decompression chain
Published December 11, 2025
Information published.
CVE-2025-54100 PowerShell Remote Code Execution Vulnerability
Published December 11, 2025
Improper neutralization of special elements used in a command (‘command injection’) in Windows PowerShell allows an unauthorized attacker to execute code locally.
CVE-2025-64678 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Published December 11, 2025
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-62560 Microsoft Excel Remote Code Execution Vulnerability
Published December 11, 2025
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-40338 ASoC: Intel: avs: Do not share the name pointer between components
Published December 11, 2025
Information published.
CVE-2025-40336 drm/gpusvm: fix hmm_pfn_to_map_order() usage
Published December 11, 2025
Information published.
CVE-2025-55753 Apache HTTP Server: mod_md (ACME), unintended retry intervals
Published December 11, 2025
Information published.
