Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-26580 State: PUBLISHED Published: 2025-02-13T13:53:06.896Z Last Updated: 2025-02-18T19:49:56.910Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CompleteWebResources Products: Page/Post Specific Social Share Buttons Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CompleteWebResources Page/Post Specific Social Share Buttons allows Stored XSS. This issue affects Page/Post Specific Social Share Buttons: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pagepost-specific-social-share-buttons/vulnerability/wordpress-page-pos
https://patchstack.com/database/wordpress/plugin/pagepost-specific-social-share-buttons/vulnerability/wordpress-page-post-specific-social-share-buttons-plugin-2-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26581 State: PUBLISHED Published: 2025-03-26T14:24:20.645Z Last Updated: 2025-03-26T15:06:59.284Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: videowhisper Products: Picture Gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Picture Gallery allows Reflected XSS. This issue affects Picture Gallery: from n/a through 1.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/picture-gallery/vulnerability/wordpress-picture-gallery-plugin-1-5-23-csrf-to-stored-xss-vulnerability?_
ordpress/plugin/picture-gallery/vulnerability/wordpress-picture-gallery-plugin-1-5-23-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26582 State: PUBLISHED Published: 2025-02-13T13:53:07.807Z Last Updated: 2025-02-18T19:49:46.061Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Blackbam Products: TinyMCE Advanced qTranslate fix editor problems Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Blackbam TinyMCE Advanced qTranslate fix editor problems allows Stored XSS. This issue affects TinyMCE Advanced qTranslate fix editor problems: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tinymce-advanced-qtranslate-fix-editor-problems/vulnerability/wordpre
- https://patchstack.com/database/wordpress/plugin/tinymce-advanced-qtranslate-fix-editor-problems/vulnerability/wordpress-tinymce-advanced-qtranslate-fix-editor-problems-plugin-1-0-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26583 State: PUBLISHED Published: 2025-03-26T14:24:20.796Z Last Updated: 2025-03-26T15:06:42.940Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: videowhisper Products: Video Share VOD Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Video Share VOD allows Reflected XSS. This issue affects Video Share VOD: from n/a through 2.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/video-share-vod/vulnerability/wordpress-video-share-vod-plugin-2-6-32-reflected-cross-site-scripting-vul
ordpress/plugin/video-share-vod/vulnerability/wordpress-video-share-vod-plugin-2-6-32-reflected-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2025-26584 State: PUBLISHED Published: 2025-03-26T14:24:21.045Z Last Updated: 2025-03-26T15:30:30.343Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: TBTestimonials Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound TBTestimonials allows Reflected XSS. This issue affects TBTestimonials: from n/a through 1.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tb-testimonials/vulnerability/wordpress-tbtestimonials-plugin-1-7-3-reflected-cross-site-scripting-xss-vulnerabilit
ugin/tb-testimonials/vulnerability/wordpress-tbtestimonials-plugin-1-7-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26585 State: PUBLISHED Published: 2025-03-03T13:30:28.614Z Last Updated: 2025-03-03T17:34:43.573Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: DL Leadback Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound DL Leadback allows Reflected XSS. This issue affects DL Leadback: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dl-leadback/vulnerability/wordpress-dl-leadback-plugin-1-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26586 State: PUBLISHED Published: 2025-03-03T13:30:28.771Z Last Updated: 2025-03-03T17:34:37.225Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Events Planner Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Events Planner allows Reflected XSS. This issue affects Events Planner: from n/a through 1.3.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/events-planner/vulnerability/wordpress-events-planner-plugin-1-3-10-reflected-cross-site-scripting-xss-vulnerabili
lugin/events-planner/vulnerability/wordpress-events-planner-plugin-1-3-10-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26587 State: PUBLISHED Published: 2025-03-03T13:30:28.946Z Last Updated: 2025-03-03T15:20:23.184Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: sidebarTabs Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound sidebarTabs allows Reflected XSS. This issue affects sidebarTabs: from n/a through 3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sidebartabs/vulnerability/wordpress-sidebartabs-plugin-3-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26588 State: PUBLISHED Published: 2025-03-03T13:30:29.129Z Last Updated: 2025-03-03T15:22:28.044Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: TTT Crop Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound TTT Crop allows Reflected XSS. This issue affects TTT Crop: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ttt-crop/vulnerability/wordpress-ttt-crop-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26589 State: PUBLISHED Published: 2025-03-03T13:30:29.273Z Last Updated: 2025-03-03T15:37:04.197Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: IE CSS3 Support Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound IE CSS3 Support allows Reflected XSS. This issue affects IE CSS3 Support: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ie-css3-support/vulnerability/wordpress-ie-css3-support-plugin-2-0-1-reflected-cross-site-scripting-xss-vulnerab
/plugin/ie-css3-support/vulnerability/wordpress-ie-css3-support-plugin-2-0-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26590 State: PUBLISHED Published: 2025-06-06T12:54:37.782Z Last Updated: 2025-06-06T16:23:45.991Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Nir Products: Complete Google Seo Scan Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nir Complete Google Seo Scan allows SQL Injection. This issue affects Complete Google Seo Scan: from n/a through 3.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/complete-google-seo-scan/vulnerability/wordpress-complete-google-seo-scan-3-5-1-sql-injection-v
atabase/wordpress/plugin/complete-google-seo-scan/vulnerability/wordpress-complete-google-seo-scan-3-5-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-26591 State: PUBLISHED Published: 2025-07-04T08:42:08.372Z Last Updated: 2025-07-08T14:07:19.758Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Noor Alam Products: WP fancybox Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam WP fancybox allows Stored XSS. This issue affects WP fancybox: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-fancybox/vulnerability/wordpress-wp-fancybox-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-26592 State: PUBLISHED Published: 2025-06-09T15:56:54.330Z Last Updated: 2025-06-10T13:32:17.644Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AncoraThemes Products: Inset Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Inset allows PHP Local File Inclusion. This issue affects Inset: from n/a through 1.18.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/inset/vulnerability/wordpress-inset-1-18-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-26593 State: PUBLISHED Published: 2025-06-06T12:54:37.321Z Last Updated: 2025-06-06T16:23:53.378Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: FasterThemes Products: FastBook Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in FasterThemes FastBook allows Cross Site Request Forgery. This issue affects FastBook: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fastbook-responsive-appointment-booking-and-scheduling-system/vulnerability/wordpress-fastbook-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-26594 State: PUBLISHED Published: 2025-02-25T15:53:51.324Z Last Updated: 2025-11-06T21:09:05.152Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Upd
d Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-416 Description: A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference point
rsor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:2500 - https://access.redhat.com/errata/RHSA-2025:2502 - https://access.redhat.com/errata/RHSA-2025:2861 - https://access.redhat.com/errata/RHSA-2025:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 - https://access.redhat.com/errata/RHSA-2025:2873 - https://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:
om/errata/RHSA-2025:2873 - https://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:2875 - https://access.redhat.com/errata/RHSA-2025:2879 - https://access.redhat.com/errata/RHSA-2025:2880 - https://access.redhat.com/errata/RHSA-2025:7163 - https://access.redhat.com/errata/RHSA-2025:7165 - https://access.redhat.com/errata/RHSA-2025:7458 - https://access.redhat.com/security/cve/CVE-2025-26594 - https://bugzilla.redhat.com/show_bug.cgi?id=2345248
CVE ID: CVE-2025-26595 State: PUBLISHED Published: 2025-02-25T15:54:06.708Z Last Updated: 2025-11-06T21:09:06.644Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Upd
d Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-121 Description: A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that bu
n XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:2500 - https://access.redhat.com/errata/RHSA-2025:2502 - https://access.redhat.com/errata/RHSA-2025:2861 - https://access.redhat.com/errata/RHSA-2025:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 - https://access.redhat.com/errata/RHSA-2025:2873 - https://access.redhat.com/errata/RHSA
dhat.com/errata/RHSA-2025:2866 - https://access.redhat.com/errata/RHSA-2025:2873 - https://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:2875 - https://access.redhat.com/errata/RHSA-2025:2879 - https://access.redhat.com/errata/RHSA-2025:2880 - https://access.redhat.com/errata/RHSA-2025:7163 - https://access.redhat.com/errata/RHSA-2025:7165 - https://access.redhat.com/errata/RHSA-2025:7458 - https://access.redhat.com/security/cve/CVE-2025-26595 - https://bugzilla.redhat.com/show_bug.cgi?id=2345257
CVE ID: CVE-2025-26596 State: PUBLISHED Published: 2025-02-25T15:54:23.693Z Last Updated: 2025-11-06T21:09:08.425Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Upd
d Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-787 Description: A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based
ion of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:2500 - https://access.redhat.com/errata/RHSA-2025:2502 - https://access.redhat.com/errata/RHSA-2025:2861 - https://access.redhat.com/errata/RHSA-2025:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 - https://access.redhat.com/errata/RHSA-2025:2873 - https://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:2875 - https://access.redhat.c
ps://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:2875 - https://access.redhat.com/errata/RHSA-2025:2879 - https://access.redhat.com/errata/RHSA-2025:2880 - https://access.redhat.com/errata/RHSA-2025:7163 - https://access.redhat.com/errata/RHSA-2025:7165 - https://access.redhat.com/errata/RHSA-2025:7458 - https://access.redhat.com/security/cve/CVE-2025-26596 - https://bugzilla.redhat.com/show_bug.cgi?id=2345256
CVE ID: CVE-2025-26597 State: PUBLISHED Published: 2025-02-25T15:54:48.196Z Last Updated: 2025-11-06T21:09:08.703Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Upd
d Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-119 Description: A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged.
geTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:2500 - https://access.redhat.com/errata/RHSA-2025:2502 - https://access.redhat.com/errata/RHSA-2025:2861 - https://access.redhat.com/errata/RHSA-2025:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 - https://access.redhat.com/errata/RHSA-2
at.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 - https://access.redhat.com/errata/RHSA-2025:2873 - https://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:2875 - https://access.redhat.com/errata/RHSA-2025:2879 - https://access.redhat.com/errata/RHSA-2025:2880 - https://access.redhat.com/errata/RHSA-2025:7163 - https://access.redhat.com/errata/RHSA-2025:7165 - https://access.redhat.com/errata/RHSA-2025:7458 - https://access.redhat.com/security/cve/CVE-2025-26597 - https://bugzilla.redhat.com/show_bug.cgi?id=2345255
CVE ID: CVE-2025-26598 State: PUBLISHED Published: 2025-02-25T15:54:57.355Z Last Updated: 2025-11-06T21:09:15.525Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Upd
d Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-787 Description: An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or sup
unction GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:2500 - https://access.redhat.com/errata/RHSA-2025:2502 - https://access.redhat.com/errata/RHSA-2025:2861 - https://access.redhat.com/errata/RHSA-2025:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 - https://acce
:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 - https://access.redhat.com/errata/RHSA-2025:2873 - https://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:2875 - https://access.redhat.com/errata/RHSA-2025:2879 - https://access.redhat.com/errata/RHSA-2025:2880 - https://access.redhat.com/errata/RHSA-2025:7163 - https://access.redhat.com/errata/RHSA-2025:7165 - https://access.redhat.com/errata/RHSA-2025:7458 - https://access.redhat.com/security/cve/CVE-2025-26598 - https://bugzilla.redhat.com/show_bug.cgi?id=2345254