Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2025-43407

This issue was addressed with improved entitlements. This issue is fixed in visionOS 26.1, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, iOS 26.1 and iPadOS 26.1, tvOS 26.1. An app may be able to break out of its sandbox....

Affected Products : macos iphone_os tvos ipados visionos
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-47365

Memory corruption while processing large input data from a remote source via a communication interface....

Affected Products : qam8295p_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmware sa8155p_firmware +60 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-43939

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading...

Affected Products : unity_operating_environment
Published: Oct. 30, 2025

Modified: Nov. 03, 2025

Vuln Type: Injection
7.8

HIGH

CVE-2025-43940

Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading...

Affected Products : unity_operating_environment
Published: Oct. 30, 2025

Modified: Nov. 03, 2025

Vuln Type: Injection
7.8

HIGH

CVE-2025-43476

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to break out of its sandbox....

Affected Products : macos
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-60707

Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2
Published: Nov. 11, 2025

Modified: Nov. 11, 2025
7.8

HIGH

CVE-2025-20716

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. ...

Affected Products : openwrt mt6890 mt7663 mt7615 mt7622 mt7915 mt7916 mt7986 mt7981 software_development_kit
Published: Oct. 14, 2025

Modified: Oct. 15, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-59233

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

Affected Products : office 365_apps excel office_online_server office_long_term_servicing_channel office_macos_2024 office_macos_2021 excel_2016 office_2024 office_2021 +1 more products
Published: Oct. 14, 2025

Modified: Oct. 28, 2025
7.8

HIGH

CVE-2025-59234

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally....

Affected Products : office 365_apps office_long_term_servicing_channel office_macos_2024 office_macos_2021 office_2016 office_2024 office_2021 office_2019
Published: Oct. 14, 2025

Modified: Oct. 28, 2025
7.8

HIGH

CVE-2025-43472

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to gain root privileges....

Affected Products : macos
Published: Nov. 04, 2025

Modified: Nov. 04, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-40811

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT file...

Affected Products : solid_edge_se2024 solid_edge_se2025
Published: Oct. 14, 2025

Modified: Oct. 16, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-20714

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. ...

Affected Products : openwrt mt6890 mt7663 mt7615 mt7622 mt7915 mt7916 mt7986 mt7981 software_development_kit
Published: Oct. 14, 2025

Modified: Oct. 15, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-10924

GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the targe...

Affected Products : gimp
Published: Oct. 29, 2025

Modified: Nov. 04, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-43361

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 26, watchOS 26, iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, visionOS 26. A malicious app may be able to read kernel memory....

Affected Products : macos iphone_os tvos watchos ipados visionos
Published: Nov. 04, 2025

Modified: Nov. 04, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-20723

In gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pat...

Affected Products : android mt6835 mt6878 mt6886 mt6897 mt6985 mt6989 mt8791t mt8676 mt8678 +5 more products
Published: Oct. 14, 2025

Modified: Oct. 15, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-53768

Use after free in Xbox allows an authorized attacker to elevate privileges locally....

Affected Products : windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_22h2 windows_10_1507 windows_11_23h2 windows_11_24h2 windows_11_25h2
Published: Oct. 14, 2025

Modified: Oct. 20, 2025
7.8

HIGH

CVE-2025-47367

Memory corruption while accessing a buffer during IOCTL processing....

Affected Products : wcd9380_firmware wcd9385_firmware wsa8830_firmware wsa8835_firmware qcm6490_firmware qcs6490_firmware snapdragon_7c\+_gen_3_compute_firmware wcd9370_firmware wcd9375_firmware fastconnect_6900_firmware +52 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-43387

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2. A malicious app may be able to gain root privileges....

Affected Products : macos
Published: Nov. 04, 2025

Modified: Nov. 04, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-58722

Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 +5 more products
Published: Oct. 14, 2025

Modified: Nov. 07, 2025
7.8

HIGH

CVE-2025-9871

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low...

Affected Products : synapse
Published: Oct. 29, 2025

Modified: Nov. 06, 2025

Vuln Type: Path Traversal

Showing 20 of 4058 Results

Browse by Apps

Latest CVE Feed

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable