Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-49151 State: PUBLISHED Published: 2025-06-25T16:32:30.492Z Last Updated: 2025-07-17T13:43:28.516Z Vendors: Microsens Products: NMP Web+ Problem Types: CWE-547 Description: The affected products could allow an unauthenticated attacker to generate forged JSON Web Tokens (JWT) to bypass authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07
CVE ID: CVE-2025-49152 State: PUBLISHED Published: 2025-06-25T16:34:00.772Z Last Updated: 2025-07-17T13:44:34.959Z Vendors: Microsens Products: NMP Web+ Problem Types: CWE-613 Description: The affected products contain JSON Web Tokens (JWT) that do not expire, which could allow an attacker to gain access to the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07
CVE ID: CVE-2025-49153 State: PUBLISHED Published: 2025-06-25T16:36:11.596Z Last Updated: 2025-07-17T13:46:29.428Z Vendors: Microsens Products: NMP Web+ Problem Types: CWE-22 Description: The affected products could allow an unauthenticated attacker to overwrite files and execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07
CVE ID: CVE-2025-49154 State: PUBLISHED Published: 2025-06-17T18:42:10.085Z Last Updated: 2025-06-17T20:25:33.603Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service, Worry-Free Business Security Problem Types: CWE-284 Description: An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences for the security and stability of affected installations. Please note: an attacker must first obtain the ability to execute low-privilege
and stability of affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0019917 - https://success.trendmicro.com/en-US/solution/KA-0019936
CVE ID: CVE-2025-49155 State: PUBLISHED Published: 2025-06-17T18:42:31.517Z Last Updated: 2025-06-17T20:22:40.129Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Problem Types: CWE-427 Description: An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0019917 - https://www.zerodayinitiative.com/advisories/ZDI-25
rences: - https://success.trendmicro.com/en-US/solution/KA-0019917 - https://www.zerodayinitiative.com/advisories/ZDI-25-362/
CVE ID: CVE-2025-49156 State: PUBLISHED Published: 2025-06-17T18:42:39.613Z Last Updated: 2025-06-17T20:21:26.155Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Problem Types: CWE-269 Description: A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmi
to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0019917 - https://www.zerodayinitiative.com/advisories/ZDI-25-363/
CVE ID: CVE-2025-49157 State: PUBLISHED Published: 2025-06-17T18:42:49.084Z Last Updated: 2025-06-17T20:18:26.406Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Problem Types: CWE-269 Description: A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://suc
tem in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0019917 - https://www.zerodayinitiative.com/advisories/ZDI-25-364/
CVE ID: CVE-2025-49158 State: PUBLISHED Published: 2025-06-17T18:42:56.705Z Last Updated: 2025-06-17T19:55:43.823Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Problem Types: CWE-427 Description: An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
et system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0019917 - https://www.zerodayinitiative.com/advisories/ZDI-25-365/
CVE ID: CVE-2025-49162 State: PUBLISHED Published: 2025-06-02T00:00:00.000Z Last Updated: 2025-06-03T01:54:29.878Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Arris Products: VIP1113 Problem Types: CWE-424 Description: Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://full-disclosure.eu/reports/2025/FDEU-CVE-2025-1c00-arris-bootloader-shell-injection.html
CVE ID: CVE-2025-49163 State: PUBLISHED Published: 2025-06-02T00:00:00.000Z Last Updated: 2025-06-03T01:56:51.541Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Arris Products: VIP1113 Problem Types: CWE-424 Description: Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://full-disclosure.eu/reports/2025/FDEU-CVE-2025-1c00-arris-bootloader-shell-injection.html
CVE ID: CVE-2025-49164 State: PUBLISHED Published: 2025-06-02T00:00:00.000Z Last Updated: 2025-06-03T01:58:00.868Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Arris Products: VIP1113 Problem Types: CWE-321 Description: Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a485f49a8a7d0c8b0fdc9f51ced50f2530668a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://full-disclosure.eu/reports/2025/FDEU-CVE-2025-1c00-arris-bootloader-shell-injection.html
CVE ID: CVE-2025-49175 State: PUBLISHED Published: 2025-06-17T14:39:39.428Z Last Updated: 2025-11-20T07:40:21.070Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical U
Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Ent
Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-125 Description: A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:10258 - https://access.redhat.com/errata/RHSA-2025:10342 - https://access.redhat.com/errata/RHSA-2025:10343 - https://access.redhat.
s://access.redhat.com/errata/RHSA-2025:10342 - https://access.redhat.com/errata/RHSA-2025:10343 - https://access.redhat.com/errata/RHSA-2025:10344 - https://access.redhat.com/errata/RHSA-2025:10346 - https://access.redhat.com/errata/RHSA-2025:10347 - https://access.redhat.com/errata/RHSA-2025:10348 - https://access.redhat.com/errata/RHSA-2025:10349 - https://access.redhat.com/errata/RHSA-2025:10350 - https://access.redhat.com/errata/RHSA-2025:10351 - https://access.redhat.com/errata/RHSA-2025:10352 - https://access.redhat.com/errata/RHSA-2025:10355 - https://access.redhat.com/errata/RHSA-2025:10356 - https://access.redhat.com/errata/RHSA-2025:10360 - https://access.redhat.com/errata/RHSA-202
om/errata/RHSA-2025:10356 - https://access.redhat.com/errata/RHSA-2025:10360 - https://access.redhat.com/errata/RHSA-2025:10370 - https://access.redhat.com/errata/RHSA-2025:10374 - https://access.redhat.com/errata/RHSA-2025:10375 - https://access.redhat.com/errata/RHSA-2025:10376 - https://access.redhat.com/errata/RHSA-2025:10377 - https://access.redhat.com/errata/RHSA-2025:10378 - https://access.redhat.com/errata/RHSA-2025:10381 - https://access.redhat.com/errata/RHSA-2025:10410 - https://access.redhat.com/errata/RHSA-2025:9303 - https://access.redhat.com/errata/RHSA-2025:9304 - https://access.redhat.com/errata/RHSA-2025:9305 - https://access.redhat.com/errata/RHSA-2025:9306 - https://acces
9304 - https://access.redhat.com/errata/RHSA-2025:9305 - https://access.redhat.com/errata/RHSA-2025:9306 - https://access.redhat.com/errata/RHSA-2025:9392 - https://access.redhat.com/errata/RHSA-2025:9964 - https://access.redhat.com/security/cve/CVE-2025-49175 - https://bugzilla.redhat.com/show_bug.cgi?id=2369947 - https://gitlab.freedesktop.org/xorg/xserver/-/commit/0885e0b26225c90534642fe911632ec0779eebee - https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/2024
CVE ID: CVE-2025-49176 State: PUBLISHED Published: 2025-06-17T14:49:49.143Z Last Updated: 2025-11-20T07:40:19.572Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Upd
nterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enter
nux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-190 Description: A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:10258 - https://access.redhat.com/errata/RHSA-2025:10342 - https://access.redhat.com/errata/RHSA-2025:10343 - https://access.redhat.com/e
ccess.redhat.com/errata/RHSA-2025:10342 - https://access.redhat.com/errata/RHSA-2025:10343 - https://access.redhat.com/errata/RHSA-2025:10344 - https://access.redhat.com/errata/RHSA-2025:10346 - https://access.redhat.com/errata/RHSA-2025:10347 - https://access.redhat.com/errata/RHSA-2025:10348 - https://access.redhat.com/errata/RHSA-2025:10349 - https://access.redhat.com/errata/RHSA-2025:10350 - https://access.redhat.com/errata/RHSA-2025:10351 - https://access.redhat.com/errata/RHSA-2025:10352 - https://access.redhat.com/errata/RHSA-2025:10355 - https://access.redhat.com/errata/RHSA-2025:10356 - https://access.redhat.com/errata/RHSA-2025:10360 - https://access.redhat.com/errata/RHSA-2025:103
rata/RHSA-2025:10356 - https://access.redhat.com/errata/RHSA-2025:10360 - https://access.redhat.com/errata/RHSA-2025:10370 - https://access.redhat.com/errata/RHSA-2025:10374 - https://access.redhat.com/errata/RHSA-2025:10375 - https://access.redhat.com/errata/RHSA-2025:10376 - https://access.redhat.com/errata/RHSA-2025:10377 - https://access.redhat.com/errata/RHSA-2025:10378 - https://access.redhat.com/errata/RHSA-2025:10381 - https://access.redhat.com/errata/RHSA-2025:10410 - https://access.redhat.com/errata/RHSA-2025:9303 - https://access.redhat.com/errata/RHSA-2025:9304 - https://access.redhat.com/errata/RHSA-2025:9305 - https://access.redhat.com/errata/RHSA-2025:9306 - https://access.red
- https://access.redhat.com/errata/RHSA-2025:9305 - https://access.redhat.com/errata/RHSA-2025:9306 - https://access.redhat.com/errata/RHSA-2025:9392 - https://access.redhat.com/errata/RHSA-2025:9964 - https://access.redhat.com/security/cve/CVE-2025-49176 - https://bugzilla.redhat.com/show_bug.cgi?id=2369954
CVE ID: CVE-2025-49177 State: PUBLISHED Published: 2025-06-17T14:49:49.199Z Last Updated: 2025-11-20T07:40:28.175Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-200 Description: A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ient to read unintended memory from previous requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:10258 - https://access.redhat.com/errata/RHSA-2025:9303 - https://access.redhat.com/errata/RHSA-2025:9304 - https://access.redhat.com/security/cve/CVE-2025-49177 - https://bugzilla.redhat.com/show_bug.cgi?id=2369955
CVE ID: CVE-2025-49178 State: PUBLISHED Published: 2025-06-17T14:54:42.646Z Last Updated: 2025-11-20T21:11:22.439Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical U
Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-667 Description: A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:10258 - https://access.redhat.com/errata/RHSA-2025:10342 - https://access.redhat.com/errata/RHSA-2025:10343 - https://access.redh
ttps://access.redhat.com/errata/RHSA-2025:10342 - https://access.redhat.com/errata/RHSA-2025:10343 - https://access.redhat.com/errata/RHSA-2025:10344 - https://access.redhat.com/errata/RHSA-2025:10346 - https://access.redhat.com/errata/RHSA-2025:10347 - https://access.redhat.com/errata/RHSA-2025:10348 - https://access.redhat.com/errata/RHSA-2025:10349 - https://access.redhat.com/errata/RHSA-2025:10350 - https://access.redhat.com/errata/RHSA-2025:10351 - https://access.redhat.com/errata/RHSA-2025:10352 - https://access.redhat.com/errata/RHSA-2025:10355 - https://access.redhat.com/errata/RHSA-2025:10356 - https://access.redhat.com/errata/RHSA-2025:10360 - https://access.redhat.com/errata/RHSA-
t.com/errata/RHSA-2025:10356 - https://access.redhat.com/errata/RHSA-2025:10360 - https://access.redhat.com/errata/RHSA-2025:10370 - https://access.redhat.com/errata/RHSA-2025:10374 - https://access.redhat.com/errata/RHSA-2025:10375 - https://access.redhat.com/errata/RHSA-2025:10376 - https://access.redhat.com/errata/RHSA-2025:10377 - https://access.redhat.com/errata/RHSA-2025:10378 - https://access.redhat.com/errata/RHSA-2025:10381 - https://access.redhat.com/errata/RHSA-2025:10410 - https://access.redhat.com/errata/RHSA-2025:9303 - https://access.redhat.com/errata/RHSA-2025:9304 - https://access.redhat.com/errata/RHSA-2025:9305 - https://access.redhat.com/errata/RHSA-2025:9306 - https://ac
25:9304 - https://access.redhat.com/errata/RHSA-2025:9305 - https://access.redhat.com/errata/RHSA-2025:9306 - https://access.redhat.com/errata/RHSA-2025:9392 - https://access.redhat.com/errata/RHSA-2025:9964 - https://access.redhat.com/security/cve/CVE-2025-49178 - https://bugzilla.redhat.com/show_bug.cgi?id=2369977
CVE ID: CVE-2025-49179 State: PUBLISHED Published: 2025-06-17T14:54:49.288Z Last Updated: 2025-11-20T07:40:32.429Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Upd
nux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-190 Description: A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:10258 - https://access.redhat.com/errata/RHSA-2025:10342 - https://access.redhat.com/errata/RHSA-2025:10343 - https://access.redhat.com/
access.redhat.com/errata/RHSA-2025:10342 - https://access.redhat.com/errata/RHSA-2025:10343 - https://access.redhat.com/errata/RHSA-2025:10344 - https://access.redhat.com/errata/RHSA-2025:10346 - https://access.redhat.com/errata/RHSA-2025:10347 - https://access.redhat.com/errata/RHSA-2025:10348 - https://access.redhat.com/errata/RHSA-2025:10349 - https://access.redhat.com/errata/RHSA-2025:10350 - https://access.redhat.com/errata/RHSA-2025:10351 - https://access.redhat.com/errata/RHSA-2025:10352 - https://access.redhat.com/errata/RHSA-2025:10355 - https://access.redhat.com/errata/RHSA-2025:10356 - https://access.redhat.com/errata/RHSA-2025:10360 - https://access.redhat.com/errata/RHSA-2025:10
rrata/RHSA-2025:10356 - https://access.redhat.com/errata/RHSA-2025:10360 - https://access.redhat.com/errata/RHSA-2025:10370 - https://access.redhat.com/errata/RHSA-2025:10374 - https://access.redhat.com/errata/RHSA-2025:10375 - https://access.redhat.com/errata/RHSA-2025:10376 - https://access.redhat.com/errata/RHSA-2025:10377 - https://access.redhat.com/errata/RHSA-2025:10378 - https://access.redhat.com/errata/RHSA-2025:10381 - https://access.redhat.com/errata/RHSA-2025:10410 - https://access.redhat.com/errata/RHSA-2025:9303 - https://access.redhat.com/errata/RHSA-2025:9304 - https://access.redhat.com/errata/RHSA-2025:9305 - https://access.redhat.com/errata/RHSA-2025:9306 - https://access.re
- https://access.redhat.com/errata/RHSA-2025:9305 - https://access.redhat.com/errata/RHSA-2025:9306 - https://access.redhat.com/errata/RHSA-2025:9392 - https://access.redhat.com/errata/RHSA-2025:9964 - https://access.redhat.com/security/cve/CVE-2025-49179 - https://bugzilla.redhat.com/show_bug.cgi?id=2369978
CVE ID: CVE-2025-49180 State: PUBLISHED Published: 2025-06-17T15:00:18.145Z Last Updated: 2025-11-20T07:40:43.182Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Upd
nux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-190 Description: A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:10258 - https://access.redhat.com/errata/RHSA-2025:10342 - https://access.redhat.com/errata/RHSA-2025:10343 - https://access.redhat.com/errat