CVE-2025-37951 drm/v3d: Add job to pending list if the reset was skipped
Published December 19, 2025
Information published.
Microsoft Security Response Center Blog Alerts
Chromium: CVE-2025-14766 Use after free in WebGPU
Published December 19, 2025
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
CVE-2025-37961 ipvs: fix uninit-value for saddr in do_output_route4
Published December 18, 2025
Information published.
CVE-2025-37959 bpf: Scrub packet on bpf_redirect_peer
Published December 18, 2025
Information published.
CVE-2025-65082 Apache HTTP Server: CGI environment variable override
Published December 18, 2025
Information published.
CVE-2025-38097 espintcp: remove encap socket caching to avoid reference leak
Published December 18, 2025
Information published.
CVE-2025-38095 dma-buf: insert memory barrier before updating num_fences
Published December 18, 2025
Information published.
CVE-2025-37968 iio: light: opt3001: fix deadlock due to concurrent flag access
Published December 18, 2025
Information published.
CVE-2024-28863 node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation
Published December 18, 2025
Information published.
CVE-2025-54567 hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.
Published December 18, 2025
Information published.
