Skip to content
OpenAdvisories

Archive

26 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /26 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.0
    CVE-2025-26417 Public exploit

    In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening fi…

    Google Android Android
  • High 8.0
    CVE-2023-21125 Public exploit

    In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free. This cou…

    Google Android Android
  • High 8.8
    CVE-2025-9478 Public exploit

    Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap …

    Google Chrome chromium chromium Browsers Debian Wolfi
  • High 7.0
    CVE-2025-9491 Public exploit EPSS 76%

    Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability

    Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerabilit…

    Microsoft Windows Windows
  • Unscored —
    CVE-2025-38676 Public exploit

    iommu/amd: Avoid stack buffer overflow from kernel cmdline

    In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str"…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.2
    CVE-2025-7775 Exploited Public exploit EPSS 21%

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC an…

    NetScaler ADC Gateway
    KEV Aug 26, 2025
  • High 7.5
    CVE-2025-9172 Public exploit

    Vibes <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter

    The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ…

    Pierre Lannoy Vibes Web / CMS