CWE-668

719 vulnerabilities with CWE-668

CVE-2025-38670 HIGH

Linux Kernel - Unprotected User Data Exposure via Stack Mismatch in cpu_switch_to() and call_on_irq_stack()

CVSS 7.1

CVE-2025-9074 CRITICAL

Docker Desktop - Privilege Escalation

CVE-2025-38521 HIGH

Linux Kernel - Denial of Service via GPU Hard Reset Sequence

CVSS 7.1

CVE-2025-55077 HIGH

Tyler Technologies ERP Pro 9 SaaS - Command Injection

CVSS 7.4

CVE-2025-54126 MEDIUM

WebAssembly Micro Runtime < 2.4.0 - Unintended Network Exposure via IPv4 Address Pool Configuration

CVSS 5.3

CVE-2025-8107 MEDIUM

OceanBase <Oracle Mode - Privilege Escalation

CVSS 6.3

CVE-2025-34119 HIGH

EasyCafe Server <2.2.14 - Info Disclosure

CVE-2025-6788 MEDIUM

EcoStruxure Power Monitoring Expert and Advanced Reporting Module - Exposure of TGML Diagram Resources to Wrong Sphere

CVE-2025-34064 CRITICAL

OneLogin AD Connector - Info Disclosure

CVE-2025-46707 MEDIUM

Imaginationtech DDK - Privilege Escalation via Guest VM

CVSS 5.2

CVE-2025-49574 MEDIUM

Quarkus < 3.24.1, < 3.20.2, < 3.15.6 - Data Leak via Duplicated Context

CVSS 6.4

CVE-2025-37966 MEDIUM

Linux Kernel 6.13-6.14.7 - Denial of Service via PR_SET_TAGGED_ADDR_CTRL

CVSS 5.5

CVE-2025-3651 CRITICAL

Work Desktop for Mac <10.8.2.33 - RCE

CVE-2025-32783 MEDIUM

XWiki 5.0-16.7.1 - Unintended Message Exposure via Message Stream Feature

CVSS 4.7

CVE-2025-22069 HIGH

Linux Kernel 6.14-6.14.2 - Exposure of Resource to Wrong Sphere via ftrace_return_to_handler

CVSS 7.8

CVE-2025-32428 CRITICAL

jupyter-remote-desktop-proxy 3.0.0 - Exposure of VNC Server to Wrong Sphere via TigerVNC

CVE-2025-2857 CRITICAL

Firefox < 136.0.4, 115.21.1, 128.8.1-128.*, 136.0.4-136.* - Sandbox Escape via IPC Handle Mismanagement

CVSS 10.0

CVE-2025-21608 MEDIUM

meshtastic_firmware 2.5.0-2.5.18 - Unauthenticated Message Spoofing via MQTT

CVSS 5.3

CVE-2025-23205 MEDIUM

nbgrader 0.9.4 - Exposure of Sensitive Data via Frame Ancestors Misconfiguration

CVE-2024-13484 HIGH

openshift-gitops-operator-container - Info Disclosure

CVSS 8.2

CVE-2024-57838 HIGH

Linux Kernel - Stack Depot Exhaustion via Missing IRQ Entry Marking

CVSS 7.1

CVE-2024-52543 MEDIUM

Dell NativeEdge < 2.2.0.0 - Information Disclosure via Insecure Temporary File Permissions

CVSS 6.5

CVE-2024-5660 CRITICAL

ARM Cortex and Neoverse Firmware - Unprotected Memory Access via Hardware Page Aggregation

CVSS 9.8

CVE-2024-43704 HIGH

Imagination Technologies Graphics DDK 1.13 RTM-24.2 - Unauthorized GPU Buffer Access

CVSS 8.4

CVE-2024-24985 HIGH

Intel(R) processor - Privilege Escalation

CVSS 7.2