Skip to content
OpenAdvisories

Archive

July 2025

Vulnerabilities first published in this month (UTC), newest first.

← June 2025 2025 / July August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2025-31277 Exploited Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
    KEV Mar 20, 2026
  • High 7.8
    CVE-2025-38352 Exploited Public exploit

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

    In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Sep 4, 2025
  • High 7.5
    CVE-2025-54313 Exploited Public exploit

    eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code

    eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

    prettier eslint-config-prettier eslint-plugin-prettier @pkgr/core npm
    KEV Jan 22, 2026
  • High 8.8
    CVE-2025-6558 Exploited Public exploit EPSS 11%

    Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote a…

    Google Chrome chromium chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Jul 22, 2025
  • High 8.1
    CVE-2025-48384 Exploited Public exploit

    Git allows arbitrary code execution through broken config quoting

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). W…

    git git git git Debian Ubuntu Azure Linux Alpine
    KEV Aug 25, 2025
  • High 8.8
    CVE-2025-49704 Exploited · Ransomware Public exploit EPSS 100%

    Microsoft SharePoint Remote Code Execution Vulnerability

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016
    KEV Jul 22, 2025