CVE-2025-21xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
963 records · Page 6 of 10
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle HTTP Server acces
UpdatedVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a
UpdatedVulnerability in the MySQL Enterprise Firewall product of Oracle MySQL (component: Firewall). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Enterprise Firewall. Successful attacks of this vulnerability can result in u
UpdatedVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can
UpdatedVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to c
UpdatedVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequen
UpdatedVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a
UpdatedVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a
UpdatedVulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from a person other than the att
UpdatedInformation disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
UpdatedInformation disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
UpdatedMemory corruption during dynamic process creation call when client is only passing address and length of shell binary.
UpdatedMemory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
UpdatedInformation disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
UpdatedMemory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
UpdatedCryptographic issue while performing RSA PKCS padding decoding.
UpdatedMemory corruption while performing private key encryption in trusted application.
UpdatedMemory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
UpdatedMemory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
UpdatedTransient DOS while processing CCCH data when NW sends data with invalid length.
UpdatedMemory corruption when passing parameters to the Trusted Virtual Machine during the handshake.
UpdatedMemory corruption while processing escape code, when DisplayId is passed with large unsigned value.
UpdatedMemory corruption while processing commands from A2dp sink command queue.
UpdatedMemory corruption when using Virtual cdm (Camera Data Mover) to write registers.
UpdatedInformation disclosure while capturing logs as eSE debug messages are logged.
UpdatedMemory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.
UpdatedMemory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.
UpdatedMemory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.
UpdatedMemory corruption while reading the FW response from the shared queue.
UpdatedMemory corruption while processing a private escape command in an event trigger.
Updated- CVE-2025-21465: Out-of-bounds Read in Core 6.5 Medium
Information disclosure while processing the hash segment in an MBN file.
Updated - CVE-2025-21464: Out-of-bounds Read in Core 6.5 Medium
Information disclosure while reading data from an image using specified offset and size parameters.
Updated Transient DOS while processing the EHT operation IE in the received beacon frame.
UpdatedMemory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
UpdatedMemory corruption when programming registers through virtual CDM.
UpdatedMemory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.
UpdatedTransient DOS while parsing per STA profile in ML IE.
UpdatedMemory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
UpdatedInformation disclosure while opening a fastrpc session when domain is not sanitized.
UpdatedMemory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
UpdatedMemory corruption while submitting blob data to kernel space though IOCTL.
UpdatedTransient DOS while processing received beacon frame.
UpdatedMemory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
UpdatedTransient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.
Updated- CVE-2025-21450: Improper Authentication in GPS_GNSS 9.1 Critical
Cryptographic issue occurs due to use of insecure connection method while downloading.
Updated Transient DOS may occur while processing malformed length field in SSID IEs.
UpdatedTransient DOS may occur while parsing SSID in action frames.
UpdatedMemory corruption may occur while processing device IO control call for session control.
UpdatedTransient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
UpdatedMemory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.
UpdatedMemory corruption while copying the result to the transmission queue in EMAC.
UpdatedMemory corruption while processing message content in eAVB.
UpdatedMemory corruption while transmitting packet mapping information with invalid header payload size.
UpdatedMemory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
UpdatedMemory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
UpdatedMemory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
UpdatedMemory corruption while IOCTL call is invoked from user-space to read board data.
UpdatedMemory corruption while processing memory map or unmap IOCTL operations simultaneously.
UpdatedMemory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.
UpdatedTransient DOS may occur while parsing extended IE in beacon.
UpdatedTransient DOS may occur while parsing EHT operation IE or EHT capability IE.
UpdatedTransient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
UpdatedMemory corruption while retrieving the CBOR data from TA.
Updated- CVE-2025-21431: Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform 5.5 Medium
Information disclosure may be there when a guest VM is connected.
Updated Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
UpdatedMemory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
UpdatedMemory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
UpdatedInformation disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
UpdatedMemory corruption while processing camera TPG write request.
UpdatedMemory corruption may occur due top improper access control in HAB process.
UpdatedMemory corruption while calling the NPU driver APIs concurrently.
UpdatedMemory corruption occurs when handling client calls to EnableTestMode through an Escape call.
UpdatedCryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
UpdatedMemory corruption while processing escape code in API.
UpdatedWindows Disk Cleanup Tool Elevation of Privilege Vulnerability
UpdatedWindows Setup Files Cleanup Elevation of Privilege Vulnerability
Updated- CVE-2025-21418: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Updated Windows Telephony Service Remote Code Execution Vulnerability
UpdatedMissing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.
UpdatedAuthentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network.
UpdatedWindows Core Messaging Elevation of Privileges Vulnerability
UpdatedWindows Telephony Service Remote Code Execution Vulnerability
UpdatedWindows Telephony Service Remote Code Execution Vulnerability
Updated- CVE-2025-21410: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Updated Windows Telephony Service Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
UpdatedWindows Telephony Service Remote Code Execution Vulnerability
UpdatedWindows Telephony Service Remote Code Execution Vulnerability
UpdatedVisual Studio Elevation of Privilege Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Spoofing Vulnerability
UpdatedOn-Premises Data Gateway Information Disclosure Vulnerability
UpdatedMicrosoft Office OneNote Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
Updated- CVE-2025-21399: Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability 7.4 High
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
Updated Microsoft Office Remote Code Execution Vulnerability
UpdatedMissing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.
UpdatedMicrosoft Access Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
Updated