diff --git a/CVE-2017/CVE-2017-175xx/CVE-2017-17552.json b/CVE-2017/CVE-2017-175xx/CVE-2017-17552.json index f9c2a054479..3d9789a9e82 100644 --- a/CVE-2017/CVE-2017-175xx/CVE-2017-17552.json +++ b/CVE-2017/CVE-2017-175xx/CVE-2017-17552.json @@ -2,7 +2,7 @@ "id": "CVE-2017-17552", "sourceIdentifier": "cve@mitre.org", "published": "2018-02-07T17:29:01.183", - "lastModified": "2024-11-21T03:18:08.933", + "lastModified": "2025-10-23T13:52:46.107", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -81,16 +81,7 @@ "nodes": [ { "operator": "OR", - "negate": false, - "cpeMatch": [ - { - "vulnerable": true, - "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*", - "versionStartIncluding": "6590", - "versionEndIncluding": "6613", - "matchCriteriaId": "80239E1E-73FB-47D0-9106-DD0D714AAEA4" - } - ] + "negate": false } ] } diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49605.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49605.json index fba46d77d98..8f0534ce9d5 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49605.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49605.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49605", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:36.000", - "lastModified": "2025-02-26T07:01:36.000", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:08:07.613", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,152 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: igc: Restablecer la l\u00f3gica IGC_REMOVED e implementarla correctamente La versi\u00f3n fusionada inicialmente del c\u00f3digo del controlador igc (a trav\u00e9s de el commit 146740f9abc4, \"igc: Agregar soporte para PF\") conten\u00eda las siguientes comprobaciones IGC_REMOVED checks in the igc_rd32/wr32() MMIO accessors: u32 igc_rd32(struct igc_hw *hw, u32 reg) { u8 __iomem *hw_addr = READ_ONCE(hw->hw_addr); u32 value = 0; if (IGC_REMOVED(hw_addr)) return ~value; value = readl(&hw_addr[reg]); /* reads should not return all F's */ if (!(~value) && (!reg || !(~readl(hw_addr)))) hw->hw_addr = NULL; return value; } And: #define wr32(reg, val) \\ do { \\ u8 __iomem *hw_addr = READ_ONCE((hw)->hw_addr); \\ if (!IGC_REMOVED(hw_addr)) \\ writel((val), &hw_addr[(reg)]); \\ } while (0) Por ejemplo, igb tiene verificaciones similares en sus accesores MMIO y tiene una macro similar E1000_REMOVED, que se implementa de la siguiente manera: #define E1000_REMOVED(h) Unlikely(!(h)) Estas verificaciones sirven para detectar y tomar nota de un retorno de lectura MMIO 0xffffffff del dispositivo, que puede ser causado por una falla en el enlace PCIe o alg\u00fan otro tipo de error de bus PCI, y para evitar realizar lecturas y escrituras MMIO desde ese punto en adelante. Sin embargo, la macro IGC_REMOVED no se implement\u00f3 originalmente: #ifndef IGC_REMOVED #define IGC_REMOVED(a) (0) #endif /* IGC_REMOVED */ Esto provoc\u00f3 que la l\u00f3gica IGC_REMOVED se eliminara por completo en una confirmaci\u00f3n posterior (confirmaci\u00f3n 3c215fb18e70, \"igc: eliminar la funci\u00f3n IGC_REMOVED\"), con el fundamento de que dichas comprobaciones solo son importantes para la virtualizaci\u00f3n y que igc no admite la virtualizaci\u00f3n, pero un dispositivo PCIe puede desconectarse incluso sin que se utilice la virtualizaci\u00f3n y, sin las comprobaciones adecuadas, un error de bus PCIe que afecte a un adaptador igc provocar\u00e1 varias desreferencias de puntero NULL, ya que el primer acceso despu\u00e9s del error establecer\u00e1 hw->hw_addr en NULL, y los accesos posteriores desreferenciar\u00e1n ciegamente este puntero ahora NULL. Este parche restablece las comprobaciones IGC_REMOVED en igc_rd32/wr32() e implementa IGC_REMOVED de la forma en que se hace para igb, comprobando el caso improbable() de que hw_addr sea NULL. Este cambio evita los errores que se observan cuando se produce una falla en el enlace PCIe en un adaptador igc." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.208", + "matchCriteriaId": "58A5EC97-5FF0-4B0A-8074-2A5A57644D59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.134", + "matchCriteriaId": "4B697B47-6B36-47E0-95DC-054EC4633DEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.58", + "matchCriteriaId": "13CF20C8-4DA9-4A21-AD13-7A5C22E5FB05" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.15", + "matchCriteriaId": "EAD6B571-194C-43A2-A4AB-F68F869D13BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc7:*:*:*:*:*:*", + "matchCriteriaId": "C178431E-AD82-4B3D-B70F-A273A02ABD5D" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/16cb6717f4f42487ef10583eb8bc98e7d1e33d65", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/70965b6e5c03aa70cc754af1226b9f9cde0c4bf3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/77836dbe35382aaf8108489060c5c89530c77494", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7c1ddcee5311f3315096217881d2dbe47cc683f9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e75b73081f1ec169518773626c2ff3950476660b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49606.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49606.json index 1fbfeeeec95..b4245242a8f 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49606.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49606.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49606", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:36.093", - "lastModified": "2025-02-26T07:01:36.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:08:16.290", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,124 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/irdma: Arreglar suspensi\u00f3n desde contexto no v\u00e1lido ERROR Tomar qos_mutex para procesar los QP de RoCEv2 en eventos netdev provoca un splat del kernel. Solucione esto eliminando la gesti\u00f3n de RoCEv2 en irdma_cm_teardown_connections que usa el mutex. Esta gesti\u00f3n solo es necesario para que iWARP evite que se establezcan conexiones mientras el enlace est\u00e1 inactivo o que las conexiones permanezcan funcionales despu\u00e9s de que se elimine la direcci\u00f3n IP. ERROR: funci\u00f3n de suspensi\u00f3n llamada desde un contexto no v\u00e1lido en kernel/locking/mutex. Seguimiento de llamadas: kernel: dump_stack+0x66/0x90 kernel: ___might_sleep.cold.92+0x8d/0x9a kernel: mutex_lock+0x1c/0x40 kernel: irdma_cm_teardown_connections+0x28e/0x4d0 [irdma] kernel: ? check_preempt_curr+0x7a/0x90 kernel: ? select_idle_sibling+0x22/0x3c0 kernel: ? select_task_rq_fair+0x94c/0xc90 kernel: ? irdma_exec_cqp_cmd+0xc27/0x17c0 [irdma] kernel: ? __wake_up_common+0x7a/0x190 kernel: irdma_if_notify+0x3cc/0x450 [irdma] kernel: ? sched_clock_cpu+0xc/0xb0 kernel: irdma_inet6addr_event+0xc6/0x150 [irdma] " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.14", + "versionEndExcluding": "5.15.58", + "matchCriteriaId": "DF6D28E5-50E7-41DF-8C6B-9A607F116EC2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.15", + "matchCriteriaId": "EAD6B571-194C-43A2-A4AB-F68F869D13BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc7:*:*:*:*:*:*", + "matchCriteriaId": "C178431E-AD82-4B3D-B70F-A273A02ABD5D" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2cae7e519032e4b4672cb9204d5586a441924364", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a4c5115140ed1833197bad9a6b80265840ff427f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cc0315564d6eec91c716d314b743321be24c70b3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49610.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49610.json index 8dab68c4123..e5e59e431a5 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49610.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49610.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49610", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:36.463", - "lastModified": "2025-02-26T07:01:36.463", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:08:23.073", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,104 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: VMX: Evitar el desbordamiento de RSB antes de vmenter En VMX, hay algunos retornos equilibrados entre el momento en que se escribe el valor SPEC_CTRL del invitado y el vmenter. Los retornos equilibrados (que coinciden con una llamada anterior) suelen ser correctos, pero al menos es te\u00f3ricamente posible que un NMI con una pila de llamadas profunda pueda vaciar el RSB antes de uno de los retornos. Para m\u00e1xima paranoia, no permita *ning\u00fan* retorno (equilibrado o de otro tipo) entre la escritura de SPEC_CTRL y el vmenter. [ bp: Arreglar compilaci\u00f3n de 32 bits. ]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.18.14", + "matchCriteriaId": "F6958CFC-F1AB-4F94-BDC7-685D623EE2B4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/07853adc29a058c5fd143c14e5ac528448a72ed9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/afd743f6dde87296c6f3414706964c491bb85862", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49611.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49611.json index df1fa217363..90224cf35d6 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49611.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49611.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49611", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:36.553", - "lastModified": "2025-02-26T07:01:36.553", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:08:28.643", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,174 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: x86/speculation: Fill RSB on vmexit for IBRS Prevenir ataques de envenenamiento/subdesbordamiento de RSB con RSB. Mientras tanto, agregue una serie de comentarios para intentar documentar el estado actual del conocimiento tribal sobre los ataques RSB y qu\u00e9 se est\u00e1 mitigando exactamente." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.297", + "matchCriteriaId": "AABFAC47-559E-47E9-B50B-EDC7B6ACF606" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.266", + "matchCriteriaId": "4296E6A0-201E-4D8F-B999-4C78905464C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.217", + "matchCriteriaId": "CF356816-6221-42C7-801D-1AB394237644" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.133", + "matchCriteriaId": "A15583E4-96D1-4B9F-99BD-02D3468F8A2A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.57", + "matchCriteriaId": "D1684430-CBE7-4636-9DE6-65C8AFA8FAD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.14", + "matchCriteriaId": "ADBDCD9D-B930-45BA-AAB3-974E2913B996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/17a9fc4a7b91f8599223631bb6ae6416bc0de1c0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3d323b99ff5c8c57005184056d65f6af5b0479d8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4d7f72b6e1bc630bec7e4cd51814bc2b092bf153", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8c38306e2e9257af4af2819aa287a4711ff36329", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8d5cff499a6d740c91ff37963907e0e983c37f0f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9756bba28470722dacb79ffce554336dd1f6a6cd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f744b88dfc201bf8092833ec70b23c720188b527", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49612.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49612.json index e565d3334c9..c5120cc1eac 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49612.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49612.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49612", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:36.653", - "lastModified": "2025-02-26T07:01:36.653", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:08:35.080", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: power: supply: core: Fix boundary conditions in interpolation The functions power_supply_temp2resist_simple and power_supply_ocv2cap_simple handle boundary conditions incorrectly. El cambio se introdujo en a4585ba2050f460f749bbaf2b67bd56c41e30283 (\"power: supply: core: Use library interpolation\"). Hay dos problemas: primero, las l\u00edneas \"high = i - 1\" y \"high = i\" en ocv2cap tienen el orden incorrecto en comparaci\u00f3n con temp2resist. Como consecuencia, ocv2cap establece high=-1 si ocv>table[0].ocv, lo que provoca una lectura fuera de los l\u00edmites. Segundo, la l\u00f3gica de temp2resist tampoco es correcta. Considere el caso table[] = {{20, 100}, {10, 80}, {0, 60}}. Para temp=5, esperamos una resistencia del 70 % por interpolaci\u00f3n. Sin embargo, temp2resist establece high=low=2 y devuelve 60." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "B8B21C94-C38C-4A91-8580-6D05C6F95378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/093d27bb6f2d1963f927ef59c9a2d37059175426", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a762cee5d933fe4e2e1b773d60fc74fb8248d8c4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49613.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49613.json index 74b2a4037ad..a845b6677a5 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49613.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49613.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49613", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:36.747", - "lastModified": "2025-02-26T07:01:36.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:08:40.867", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,133 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: serial: 8250: Se ha corregido el problema de uso de PM para la transferencia de consola. Cuando la consola est\u00e1 habilitada, univ8250_console_setup() calls serial8250_console_setup() before .dev is set to uart_port. Therefore, it will not call pm_runtime_get_sync(). Later, when the actual driver is going to take over univ8250_console_exit() is called. As .dev is already set, serial8250_console_exit() makes pm_runtime_put_sync() call with usage count being zero triggering PM usage count warning (extra debug for univ8250_console_setup(), univ8250_console_exit(), and serial8250_register_ports()): [ 0.068987] univ8250_console_setup ttyS0 nodev [ 0.499670] printk: console [ttyS0] enabled [ 0.717955] printk: console [ttyS0] printing thread started [ 1.960163] serial8250_register_ports assigned dev for ttyS0 [ 1.976830] printk: console [ttyS0] disabled [ 1.976888] printk: console [ttyS0] printing thread stopped [ 1.977073] univ8250_console_exit ttyS0 usage:0 [ 1.977075] serial8250 serial8250: Runtime PM usage count underflow! [ 1.977429] dw-apb-uart.6: ttyS0 at MMIO 0x4010006000 (irq = 33, base_baud = 115200) is a 16550A [ 1.977812] univ8250_console_setup ttyS0 usage:2 [ 1.978167] printk: console [ttyS0] printing thread started [ 1.978203] printk: console [ttyS0] enabled To fix the issue, call pm_runtime_get_sync() in serial8250_register_ports() as soon as .dev is set for an uart_port if it has console enabled. This problem became apparent only recently because 82586a721595 (\"PM: runtime: Avoid device usage count underflows\") agreg\u00f3 la impresi\u00f3n de advertencia. Confirm\u00e9 que este problema tambi\u00e9n ocurre con v5.18 (sin la impresi\u00f3n de advertencia, obviamente)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.7", + "versionEndExcluding": "5.10.132", + "matchCriteriaId": "C5519065-BBA0-42D6-919C-0A3E4C42A0E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.56", + "matchCriteriaId": "AF59CE2F-BA66-4BFD-83AB-4576F3D1B49A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "640221A7-96EE-4B48-8FE1-BA810131789B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/190ce5cdc55d1b66ea582ac2be6fd5a72e3cc486", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5df66302f03f87ae8953785a882d78e911f00c55", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d9cb6fabc90102f9e61fe35bd0160db88f4f53b4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f9b11229b79c0fb2100b5bb4628a101b1d37fbf6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49616.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49616.json index c0e26b034b0..9563d276705 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49616.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49616.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49616", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:37.017", - "lastModified": "2025-02-26T07:01:37.017", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:08:47.673", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,114 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: rt7*-sdw: endurecer el controlador jack_detect_handler Los controladores de c\u00f3dec de auriculares Realtek normalmente comprueban si la tarjeta est\u00e1 instanciada antes de continuar con la detecci\u00f3n del conector. Sin embargo, a los modelos rt700, rt711 y rt711-sdca les falta una comprobaci\u00f3n en el puntero de la tarjeta, lo que puede provocar desreferencias NULL en las pruebas de vinculaci\u00f3n/desvinculaci\u00f3n del controlador." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6", + "versionEndExcluding": "5.15.56", + "matchCriteriaId": "97642FF9-C873-4CF7-B20D-857123FDD6A8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "640221A7-96EE-4B48-8FE1-BA810131789B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0484271ab0ce50649329fa9dc23c50853c5b26a4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/07a606e1389a63b61cb8cd591026f30529117573", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1d75b73ec6d6b705cca528b36d8315e43e8d7fa5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49617.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49617.json index f40f681028c..d001c3d9c7d 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49617.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49617.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49617", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:37.107", - "lastModified": "2025-02-26T07:01:37.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:08:55.163", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,114 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: Intel: sof_sdw: gesti\u00f3n de errores en el registro de la tarjeta Si el registro de la tarjeta falla, generalmente debido a sondeos diferidos, las propiedades del dispositivo agregadas para los c\u00f3decs de auriculares no se eliminan, lo que genera errores del kernel en las pruebas de vinculaci\u00f3n/desvinculaci\u00f3n del controlador. Ya limpiamos las propiedades del dispositivo cuando se quita la tarjeta, este c\u00f3digo se puede mover como ayudante y llamar en caso de errores de registro de la tarjeta." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.7", + "versionEndExcluding": "5.15.56", + "matchCriteriaId": "095B804B-47EB-4492-8388-F0F473E6081F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "640221A7-96EE-4B48-8FE1-BA810131789B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/09bca0ffc95c50369f1345d80ecfaca51864126f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f2556ce6b35ae0fc72000a4daa21ded12665e2f2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fe154c4ff376bc31041c6441958a08243df09c99", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49624.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49624.json index cd469a438ea..e7072adba07 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49624.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49624.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49624", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:37.753", - "lastModified": "2025-02-26T07:01:37.753", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:09:05.757", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,150 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net:atlantic: eliminar aq_nic_deinit() cuando se ha llamado a la funci\u00f3n aq_nic_deinit() durante la suspensi\u00f3n, por lo que no tenemos que llamarla nuevamente al reanudar. En realidad, llamarla nuevamente genera otro problema de bloqueo al reanudar desde S3. Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992345] Call Trace: Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992346] Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992348] aq_nic_deinit+0xb4/0xd0 [atlantic] Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992356] aq_pm_thaw+0x7f/0x100 [atlantic] Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992362] pci_pm_resume+0x5c/0x90 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992366] ? pci_pm_thaw+0x80/0x80 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992368] dpm_run_callback+0x4e/0x120 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992371] device_resume+0xad/0x200 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992373] async_resume+0x1e/0x40 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992374] async_run_entry_fn+0x33/0x120 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992377] process_one_work+0x220/0x3c0 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992380] worker_thread+0x4d/0x3f0 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992382] ? process_one_work+0x3c0/0x3c0 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992384] kthread+0x12a/0x150 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992386] ? set_kthread_struct+0x40/0x40 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992387] ret_from_fork+0x22/0x30 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992391] Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992392] ---[ end trace 1ec8c79604ed5e0d ]--- Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992394] PM: dpm_run_callback(): pci_pm_resume+0x0/0x90 returns -110 Jul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992397] atlantic 0000:02:00.0: PM: failed to resume async: error -110 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.117", + "versionEndExcluding": "5.10.132", + "matchCriteriaId": "5522F6DE-B63E-452C-AF0B-F1447FC5C559" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.41", + "versionEndExcluding": "5.15.56", + "matchCriteriaId": "57574892-AB5B-4EAD-8302-EA4A9A35E220" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17.9", + "versionEndExcluding": "5.18", + "matchCriteriaId": "237FF665-63EB-4FB8-B2DC-5BD5D79B8053" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18.1", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "A7CCBC57-2B3B-4453-90E1-17C3BC6C823B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.18:-:*:*:*:*:*:*", + "matchCriteriaId": "0384FA0A-DE99-48D7-84E3-46ED0C3B5E03" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc7:*:*:*:*:*:*", + "matchCriteriaId": "2FCFCE58-5118-4D05-864E-C82CF20EABE5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2e15c51fefaffaf9f72255eaef4fada05055e4c5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/58c90993933e7a76305519bc70da8c0cd2907c1f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/702419db7ded2e3686fbc05040b61d7428d611d5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c2978d0124f26e453ed30fda6a37f62d8c7f19cb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49625.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49625.json index 9fadc8c45b1..5b02b246da1 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49625.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49625.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49625", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:37.847", - "lastModified": "2025-02-26T07:01:37.847", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:09:13.967", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,189 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sfc: corregir p\u00e1nico del kernel al crear VF Al crear VF, puede ocurrir un p\u00e1nico del kernel al llamar a efx_ef10_try_update_nic_stats_vf. Al liberar un b\u00fafer coherente DMA, a veces, no s\u00e9 en qu\u00e9 circunstancias espec\u00edficas, tiene que desasignar la memoria con vunmap. No est\u00e1 permitido hacer eso en el contexto de IRQ o con BH deshabilitado. De lo contrario, llegamos a esta l\u00ednea en vunmap, lo que provoca el bloqueo: BUG_ON(in_interrupt()); Este parche vuelve a habilitar BH para liberar el b\u00fafer. Mensajes de registro cuando se detecta el error: kernel BUG en mm/vmalloc.c:2727! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 6 PID: 1462 Comm: NetworkManager Kdump: loaded Tainted: G I --------- --- 5.14.0-119.el9.x86_64 #1 Hardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8.2 08/27/2020 RIP: 0010:vunmap+0x2e/0x30 ...skip... Call Trace: __iommu_dma_free+0x96/0x100 efx_nic_free_buffer+0x2b/0x40 [sfc] efx_ef10_try_update_nic_stats_vf+0x14a/0x1c0 [sfc] efx_ef10_update_stats_vf+0x18/0x40 [sfc] efx_start_all+0x15e/0x1d0 [sfc] efx_net_open+0x5a/0xe0 [sfc] __dev_open+0xe7/0x1a0 __dev_change_flags+0x1d7/0x240 dev_change_flags+0x21/0x60 ...skip... " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.2", + "versionEndExcluding": "4.9.324", + "matchCriteriaId": "2423841B-6626-4BBC-967E-B6216D5DB225" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.289", + "matchCriteriaId": "9209AEEF-782D-43E6-AA5C-9F5B9CD6ED11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.253", + "matchCriteriaId": "2B22ACD7-9025-4AD5-AD6E-A929DEC79B75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.207", + "matchCriteriaId": "C27A52F3-82C8-4F03-BE80-38D11CDBD503" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.132", + "matchCriteriaId": "46CE9FE9-22E3-45CA-8B5F-190C2CAFC5CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.56", + "matchCriteriaId": "AF59CE2F-BA66-4BFD-83AB-4576F3D1B49A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "640221A7-96EE-4B48-8FE1-BA810131789B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/16662524ec5da801fb78a1afcaf6e782f1cf103a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/68e5f32f0de9594629ff9e599294d9801c6187de", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/82bcb730f856086f033e6c04082eb4503d4c2fa4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ada74c5539eba06cf8b47d068f92e0b3963a9a6e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b82e4ad58a7fb72456503958a93060f87896e629", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b9072305270579a9d6afc9b926166231e5b1a7c8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d9840212a9c00507347c703f4fdeda16400407e0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/da346adcf5573fd8663cabfdfe8371009629a906", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49628.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49628.json index c8c9c679e0a..e3f009a1162 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49628.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49628.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49628", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:38.117", - "lastModified": "2025-02-26T07:01:38.117", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:09:21.370", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,119 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: stmmac: corrige fugas en la sonda Estas dos rutas de error deber\u00edan limpiarse antes de regresar." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.14", + "versionEndExcluding": "5.15.56", + "matchCriteriaId": "A8347FB5-291C-4756-AA5E-D7F4E3F28710" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "640221A7-96EE-4B48-8FE1-BA810131789B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/23aa6d5088e3bd65de77c5c307237b9937f8b48a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dd91bc60f305610401b2196bedb573693d6c8e46", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f4bd3202a2b4194ab6c0ce61628095d54f994db4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49635.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49635.json index 204e28c0a55..a6966608176 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49635.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49635.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49635", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:38.733", - "lastModified": "2025-02-26T07:01:38.733", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:09:27.170", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/i915/selftests: se corrige el error de desbordamiento de resta. En algunas m\u00e1quinas, hole_end puede ser lo suficientemente peque\u00f1o como para provocar un desbordamiento de resta. Por otro lado, (addr + 2 * min_alignment) puede desbordarse en caso de pruebas simuladas. Este parche deber\u00eda solucionar ambos casos. (seleccionado de el commit ab3edc679c552a466e4bf0b11af3666008bd65a2)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.12", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "2AB735BD-7DA0-4F9A-AE31-13FF3D8D92A8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/333991c4e66b3d4b5613315f18016da80344f659", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e8997d2d6b8d764e12489f1af2a1ce1d7384ca2a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49642.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49642.json index a48c2867280..62f294a2eee 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49642.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49642.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49642", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:39.373", - "lastModified": "2025-02-26T07:01:39.373", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:09:33.470", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,147 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: stmmac: dwc-qos: Deshabilitar encabezado dividido para Tegra194 Hay un problema de larga data con el controlador Ethernet Synopsys DWC para Tegra194 donde se han observado fallas aleatorias del sistema [0]. El problema ocurre cuando la funci\u00f3n de encabezado dividido est\u00e1 habilitada en el controlador stmmac. En el mal caso, se recibe una longitud de b\u00fafer mayor a la esperada y hace que el c\u00e1lculo de la longitud total del b\u00fafer se desborde. Esto da como resultado una longitud de b\u00fafer muy grande que hace que el kernel se bloquee. No est\u00e1 claro por qu\u00e9 se recibe esta longitud de b\u00fafer mayor, sin embargo, la retroalimentaci\u00f3n del equipo de dise\u00f1o de NVIDIA es que la funci\u00f3n de encabezado dividido no es compatible con Tegra194. Por lo tanto, deshabilite la compatibilidad con encabezado dividido para Tegra194 para evitar que ocurran estas fallas aleatorias. [0] https://lore.kernel.org/linux-tegra/b0b17697-f23e-8fa5-3757-604a86f3a095@nvidia.com/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-190" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4", + "versionEndExcluding": "5.4.207", + "matchCriteriaId": "8CDC07B9-0100-43EB-B768-A2AEB8FC17AF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.132", + "matchCriteriaId": "46CE9FE9-22E3-45CA-8B5F-190C2CAFC5CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.56", + "matchCriteriaId": "AF59CE2F-BA66-4BFD-83AB-4576F3D1B49A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "640221A7-96EE-4B48-8FE1-BA810131789B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/029c1c2059e9c4b38f97a06204cdecd10cfbeb8a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2968830c9b47ce093237483c6207c61065712386", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9cc8edc571b871d974b3289868553f9ce544aba6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cfa4caf3e881ad6dd366c903c34f1c7f21b857ab", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d5c315a787652c35045044877a249f7d5c8a4104", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49645.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49645.json index 4a89bf8e876..d9ee67eabf3 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49645.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49645.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49645", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:39.677", - "lastModified": "2025-02-26T07:01:39.677", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:09:40.340", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,147 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/panfrost: Arreglar la corrupci\u00f3n de la lista de reductores por parte de madvise IOCTL Llamar a madvise IOCTL dos veces en BO provoca corrupci\u00f3n de la lista de reductores de memoria y bloquea el kernel porque BO ya est\u00e1 en la lista y se agrega a la lista nuevamente, mientras que BO deber\u00eda eliminarse de la lista antes de volver a agregarse. Arr\u00e9glalo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4", + "versionEndExcluding": "5.4.207", + "matchCriteriaId": "8CDC07B9-0100-43EB-B768-A2AEB8FC17AF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.132", + "matchCriteriaId": "46CE9FE9-22E3-45CA-8B5F-190C2CAFC5CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.56", + "matchCriteriaId": "AF59CE2F-BA66-4BFD-83AB-4576F3D1B49A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "640221A7-96EE-4B48-8FE1-BA810131789B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0581613df7f9a4c5fac096ce1d5fb15b7b994240", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1807d8867402a58b831a7fc16832747ff559a0d1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/393594aad55179eb761af41533d8d1d6eb4543b0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9fc33eaaa979d112d10fea729edcd2a2e21aa912", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f036392edd9c49090781d8cca26ad6557a63bae4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49646.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49646.json index 975531ddae2..43f639b35f0 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49646.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49646.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49646", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:39.777", - "lastModified": "2025-02-26T07:01:39.777", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:09:45.900", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,147 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: mac80211: se corrige la selecci\u00f3n de cola para interfaces de malla/OCB Al usar iTXQ, el c\u00f3digo supone que solo hay una cola vif para paquetes de difusi\u00f3n, utilizando la cola BE. Permitir el marcado de colas que no sean BE viola esa suposici\u00f3n y txq->ac == skb_queue_mapping ya no est\u00e1 garantizado. Esto puede causar problemas con la gesti\u00f3n de colas en el controlador y tambi\u00e9n causa problemas con el cambio reciente de ATF, lo que resulta en una advertencia de desbordamiento de AQL." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.2", + "versionEndExcluding": "5.4.207", + "matchCriteriaId": "3C1CD258-4E62-4637-AE47-A914838A5B30" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.132", + "matchCriteriaId": "46CE9FE9-22E3-45CA-8B5F-190C2CAFC5CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.56", + "matchCriteriaId": "AF59CE2F-BA66-4BFD-83AB-4576F3D1B49A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.13", + "matchCriteriaId": "640221A7-96EE-4B48-8FE1-BA810131789B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", + "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/41ecab279a70dced9005f4d55fa0fcde8938603f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/444be5a02b77f3b7a8ac9c1a0b074fbb3bd89cd0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/50e2ab39291947b6c6c7025cf01707c270fcde59", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5a9df31017999197b6e60535940f2f2fe1bd3b0d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e013ea2a51a94b903b396a8dff531a07d470335d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49650.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49650.json index 37554193193..66eabfc5b67 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49650.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49650.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49650", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:40.150", - "lastModified": "2025-02-26T07:01:40.150", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:10:24.633", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,129 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dmaengine: qcom: bam_dma: fix runtime PM underflow El commit dbad41e7bb5f (\"dmaengine: qcom: bam_dma: check if the runtime pm enabled\") caus\u00f3 llamadas pm_runtime_get/put() desequilibradas cuando el bam se controla de forma remota. Este commit lo revierte y simplemente habilita pm_runtime en todos los casos, las funciones clk_* ya simplemente dejan de funcionar cuando el reloj es NULL. Tambi\u00e9n limpie un poco eliminando las comprobaciones nulas innecesarias de bamclk." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-191" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.17.1", + "versionEndExcluding": "5.15.54", + "matchCriteriaId": "7BA1B2CF-4FCA-47C1-93E2-F84AAA4BF155" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.11", + "matchCriteriaId": "622F881E-3317-4653-9558-86008C2FBFD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.17:-:*:*:*:*:*:*", + "matchCriteriaId": "3F438846-FE97-43DC-A655-B5EF8DED552E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.17:rc6:*:*:*:*:*:*", + "matchCriteriaId": "5F91649C-7083-4648-8E73-AD103CDE1FD0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.17:rc7:*:*:*:*:*:*", + "matchCriteriaId": "A665D441-505B-4569-9EBD-96EFC9DA73BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0ac9c3dd0d6fe293cd5044cfad10bec27d171e4e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2f6ded79068cac8cff41d5d5632564165d98ee12", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b702a1077b51fcb39507cc3bd39206f539319a96", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49654.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49654.json index b4c7f2e095e..812cbb728d7 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49654.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49654.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49654", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:40.510", - "lastModified": "2025-02-26T07:01:40.510", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:10:32.530", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,104 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: dsa: qca8k: restablecer el puerto de la CPU al cambiar la MTU Se descubri\u00f3 que la Documentaci\u00f3n carece de un detalle fundamental sobre c\u00f3mo cambiar correctamente el MAX_FRAME_SIZE del conmutador. De hecho, si se cambia MAX_FRAME_SIZE mientras el puerto de la CPU est\u00e1 encendido, el conmutador entra en p\u00e1nico y deja de enviar paquetes. Esto hace que el sistema Ethernet de administraci\u00f3n no reciba ning\u00fan paquete (la recuperaci\u00f3n lenta a\u00fan funciona) y hace que el dispositivo no sea accesible. Para recuperarse de esto, se requiere un reinicio del conmutador. Para gestionar esto correctamente, apague los puertos de la CPU antes de cambiar MAX_FRAME_SIZE y vuelva a encenderlos despu\u00e9s de que se aplique el valor." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.9", + "versionEndExcluding": "5.15.54", + "matchCriteriaId": "708DCCCF-C8E9-43AD-A089-AE3BB40C6369" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.11", + "matchCriteriaId": "622F881E-3317-4653-9558-86008C2FBFD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/188c798f3c2554fa0d7147e9b97baf144b817019", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1993f5a06736ada59dd54b50dc96755a38796ee5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/386228c694bf1e7a7688e44412cb33500b0ac585", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49655.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49655.json index 16306885ea6..a4b9ed3103f 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49655.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49655.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49655", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:40.600", - "lastModified": "2025-02-26T07:01:40.600", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:10:40.303", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,100 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fscache: Corregir ejecuci\u00f3n de invalidaci\u00f3n/b\u00fasqueda Si se abre un archivo NFS para escritura y se cierra, se le solicitar\u00e1 a fscache_invalidate() que invalide el archivo; sin embargo, si la cookie est\u00e1 en el estado LOOKING_UP (o el estado CREATING), entonces la solicitud de invalidaci\u00f3n no se registra para que fscache_cookie_state_machine() haga algo con ella. Solucione esto haciendo que __fscache_invalidate() establezca una bandera si ve que la cookie est\u00e1 en el estado LOOKING_UP para indicar que debemos ir a la invalidaci\u00f3n. Tenga en cuenta que esto requiere un recuento en el contador n_accesses para la m\u00e1quina de estado, que se liberar\u00e1 cuando haya terminado. fscache_cookie_state_machine() luego cambia al estado INVALIDATING si ve la bandera. Sin esto, un archivo nfs puede da\u00f1arse si se modifica localmente y luego se lee localmente, ya que el contenido de la memoria cach\u00e9 podr\u00eda no actualizarse." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17", + "versionEndExcluding": "5.18.11", + "matchCriteriaId": "AFC0BB81-294B-4A55-B14A-2263F178AC45" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/85e4ea1049c70fb99de5c6057e835d151fb647da", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b1ae9f617f8a5c848d9205b8e228c6f0d1af754b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49658.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49658.json index c582dcf17ef..c813b29cf6b 100644 --- a/CVE-2022/CVE-2022-496xx/CVE-2022-49658.json +++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49658.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49658", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:40.867", - "lastModified": "2025-02-26T07:01:40.867", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:10:50.553", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,128 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf: Se corrige la propagaci\u00f3n insuficiente de los l\u00edmites desde adjust_scalar_min_max_vals Kuee inform\u00f3 de un caso extremo en el que el tnum se vuelve constante despu\u00e9s de la llamada a __reg_bound_offset(), pero los l\u00edmites del registro no lo son, es decir, sus l\u00edmites m\u00ednimos siguen sin ser iguales a los l\u00edmites m\u00e1ximos del registro. Esto, a su vez, permite filtrar punteros al convertir un registro de puntero tal como est\u00e1 en un escalar desconocido mediante adjust_ptr_min_max_vals(). Before: func#0 @0 0: R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R10=fp(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) 0: (b7) r0 = 1 ; R0_w=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0)) 1: (b7) r3 = 0 ; R3_w=scalar(imm=0,umax=0,var_off=(0x0; 0x0)) 2: (87) r3 = -r3 ; R3_w=scalar() 3: (87) r3 = -r3 ; R3_w=scalar() 4: (47) r3 |= 32767 ; R3_w=scalar(smin=-9223372036854743041,umin=32767,var_off=(0x7fff; 0xffffffffffff8000),s32_min=-2147450881) 5: (75) if r3 s>= 0x0 goto pc+1 ; R3_w=scalar(umin=9223372036854808575,var_off=(0x8000000000007fff; 0x7fffffffffff8000),s32_min=-2147450881,u32_min=32767) 6: (95) exit from 5 to 7: R0=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0)) R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R3=scalar(umin=32767,umax=9223372036854775807,var_off=(0x7fff; 0x7fffffffffff8000),s32_min=-2147450881) R10=fp(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) 7: (d5) if r3 s<= 0x8000 goto pc+1 ; R3=scalar(umin=32769,umax=9223372036854775807,var_off=(0x7fff; 0x7fffffffffff8000),s32_min=-2147450881,u32_min=32767) 8: (95) exit from 7 to 9: R0=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0)) R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R3=scalar(umin=32767,umax=32768,var_off=(0x7fff; 0x8000)) R10=fp(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) 9: (07) r3 += -32767 ; R3_w=scalar(imm=0,umax=1,var_off=(0x0; 0x0)) <--- [*] 10: (95) exit What can be seen here is that R3=scalar(umin=32767,umax=32768,var_off=(0x7fff; 0x8000)) after the operation R3 += -32767 results in a 'malformed' constant, that is, R3_w=scalar(imm=0,umax=1,var_off=(0x0; 0x0)). Intersecting with var_off has not been done at that point via __update_reg_bounds(), which would have improved the umax to be equal to umin. Refactor the tnum <> min/max bounds information flow into a reg_bounds_sync() helper and use it consistently everywhere. After the fix, bounds have been corrected to R3_w=scalar(imm=0,umax=0,var_off=(0x0; 0x0)) and thus the register is regarded as a 'proper' constant scalar of 0. After: func#0 @0 0: R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R10=fp(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) 0: (b7) r0 = 1 ; R0_w=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0)) 1: (b7) r3 = 0 ; R3_w=scalar(imm=0,umax=0,var_off=(0x0; 0x0)) 2: (87) r3 = -r3 ; R3_w=scalar() 3: (87) r3 = -r3 ; R3_w=scalar() 4: (47) r3 |= 32767 ; R3_w=scalar(smin=-9223372036854743041,umin=32767,var_off=(0x7fff; 0xffffffffffff8000),s32_min=-2147450881) 5: (75) if r3 s>= 0x0 goto pc+1 ; R3_w=scalar(umin=9223372036854808575,var_off=(0x8000000000007fff; 0x7fffffffffff8000),s32_min=-2147450881,u32_min=32767) 6: (95) exit from 5 to 7: R0=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0)) R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R3=scalar(umin=32767,umax=9223372036854775807,var_off=(0x7fff; 0x7fffffffffff8000),s32_min=-2147450881) R10=fp(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) 7: (d5) if r3 s<= 0x8000 goto pc+1 ; R3=scalar(umin=32769,umax=9223372036854775807,var_off=(0x7fff; 0x7fffffffffff8000),s32_min=-2147450881,u32_min=32767) 8: (95) exit from 7 to 9: R0=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0)) R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R3=scalar(umin=32767,umax=32768,var_off=(0x7fff; 0x8000)) R10=fp(off=0 ---truncated---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14", + "versionEndExcluding": "5.10.130", + "matchCriteriaId": "60CA41C8-BEFB-4A90-8329-88C3E6E03B15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.54", + "matchCriteriaId": "B2197EF1-3D9C-4EBA-9F94-6C8668E719B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.11", + "matchCriteriaId": "622F881E-3317-4653-9558-86008C2FBFD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*", + "matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*", + "matchCriteriaId": "BF8547FC-C849-4F1B-804B-A93AE2F04A92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F3068028-F453-4A1C-B80F-3F5609ACEF60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", + "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", + "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3844d153a41adea718202c10ae91dc96b37453b5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a7de8d436db92bab8b1f44624297c2554a6ac36b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b2a28bb36664c94375926cbbb91976242847699d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e917be1f83ea14a68b3cf64d3da9968eaf991dae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-71xx/CVE-2023-7126.json b/CVE-2023/CVE-2023-71xx/CVE-2023-7126.json index c14b41952c3..7a4813fcc08 100644 --- a/CVE-2023/CVE-2023-71xx/CVE-2023-7126.json +++ b/CVE-2023/CVE-2023-71xx/CVE-2023-7126.json @@ -2,7 +2,7 @@ "id": "CVE-2023-7126", "sourceIdentifier": "cna@vuldb.com", "published": "2023-12-28T14:15:44.660", - "lastModified": "2024-11-21T08:45:19.340", + "lastModified": "2025-10-23T12:19:51.613", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -105,8 +105,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:code-projects:automated_voting_system:1.0:*:*:*:*:*:*:*", - "matchCriteriaId": "FF05C607-002F-49FC-ABEE-CF1B3CD7762A" + "criteria": "cpe:2.3:a:fabian:automated_voting_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "AF77EC17-84D7-4FE6-8646-FE46104C4880" } ] } diff --git a/CVE-2023/CVE-2023-71xx/CVE-2023-7127.json b/CVE-2023/CVE-2023-71xx/CVE-2023-7127.json index 078ff1dc9ff..082bf79e219 100644 --- a/CVE-2023/CVE-2023-71xx/CVE-2023-7127.json +++ b/CVE-2023/CVE-2023-71xx/CVE-2023-7127.json @@ -2,7 +2,7 @@ "id": "CVE-2023-7127", "sourceIdentifier": "cna@vuldb.com", "published": "2023-12-28T15:15:07.663", - "lastModified": "2024-11-21T08:45:19.487", + "lastModified": "2025-10-23T12:19:51.613", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -105,8 +105,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:code-projects:automated_voting_system:1.0:*:*:*:*:*:*:*", - "matchCriteriaId": "FF05C607-002F-49FC-ABEE-CF1B3CD7762A" + "criteria": "cpe:2.3:a:fabian:automated_voting_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "AF77EC17-84D7-4FE6-8646-FE46104C4880" } ] } diff --git a/CVE-2024/CVE-2024-140xx/CVE-2024-14011.json b/CVE-2024/CVE-2024-140xx/CVE-2024-14011.json new file mode 100644 index 00000000000..c6c34de955b --- /dev/null +++ b/CVE-2024/CVE-2024-140xx/CVE-2024-14011.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2024-14011", + "sourceIdentifier": "23637b5d-af4c-4cf9-b8f6-deb7fd0f8423", + "published": "2025-10-23T12:15:29.300", + "lastModified": "2025-10-23T13:15:37.483", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: This is a duplicate." + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-281xx/CVE-2024-28165.json b/CVE-2024/CVE-2024-281xx/CVE-2024-28165.json index 337f06ebcc5..42ef2ad2106 100644 --- a/CVE-2024/CVE-2024-281xx/CVE-2024-28165.json +++ b/CVE-2024/CVE-2024-281xx/CVE-2024-28165.json @@ -2,8 +2,8 @@ "id": "CVE-2024-28165", "sourceIdentifier": "cna@sap.com", "published": "2024-05-14T16:16:43.987", - "lastModified": "2024-11-21T09:05:56.627", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:20:36.727", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.8 } ] }, @@ -51,22 +71,56 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:-:*:*:*", + "matchCriteriaId": "4AA1BB94-FF0C-4D4D-A8EC-F0D8505B966C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:440:*:*:*:-:*:*:*", + "matchCriteriaId": "0670A535-8FDB-45FD-9443-1F24BB5A7E65" + } + ] + } + ] + } + ], "references": [ { "url": "https://me.sap.com/notes/3431794", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Patch" + ] }, { "url": "https://me.sap.com/notes/3431794", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Permissions Required" + ] }, { "url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-327xx/CVE-2024-32735.json b/CVE-2024/CVE-2024-327xx/CVE-2024-32735.json index 4b4d66da2cf..3ca60b0c2cd 100644 --- a/CVE-2024/CVE-2024-327xx/CVE-2024-32735.json +++ b/CVE-2024/CVE-2024-327xx/CVE-2024-32735.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32735", "sourceIdentifier": "vulnreport@tenable.com", "published": "2024-05-14T15:37:03.527", - "lastModified": "2024-11-21T09:15:35.573", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:13:36.923", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,52 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:enterprise:windows:*:*", + "versionEndExcluding": "2.8.3", + "matchCriteriaId": "126B1CFF-D57B-4702-87D3-021C846308AD" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote", - "source": "vulnreport@tenable.com" + "source": "vulnreport@tenable.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.tenable.com/security/research/tra-2024-14", - "source": "vulnreport@tenable.com" + "source": "vulnreport@tenable.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.tenable.com/security/research/tra-2024-14", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-327xx/CVE-2024-32736.json b/CVE-2024/CVE-2024-327xx/CVE-2024-32736.json index 8b194252b86..19e39f3aae1 100644 --- a/CVE-2024/CVE-2024-327xx/CVE-2024-32736.json +++ b/CVE-2024/CVE-2024-327xx/CVE-2024-32736.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32736", "sourceIdentifier": "vulnreport@tenable.com", "published": "2024-05-14T15:37:03.870", - "lastModified": "2025-03-25T19:15:42.990", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:14:01.773", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -51,22 +71,52 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:enterprise:windows:*:*", + "versionEndExcluding": "2.8.3", + "matchCriteriaId": "126B1CFF-D57B-4702-87D3-021C846308AD" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote", - "source": "vulnreport@tenable.com" + "source": "vulnreport@tenable.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.tenable.com/security/research/tra-2024-14", - "source": "vulnreport@tenable.com" + "source": "vulnreport@tenable.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.tenable.com/security/research/tra-2024-14", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-327xx/CVE-2024-32737.json b/CVE-2024/CVE-2024-327xx/CVE-2024-32737.json index e2247cadf06..08d1bf314c2 100644 --- a/CVE-2024/CVE-2024-327xx/CVE-2024-32737.json +++ b/CVE-2024/CVE-2024-327xx/CVE-2024-32737.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32737", "sourceIdentifier": "vulnreport@tenable.com", "published": "2024-05-14T15:37:04.270", - "lastModified": "2024-11-21T09:15:35.857", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:14:21.957", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -51,22 +71,52 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:enterprise:windows:*:*", + "versionEndExcluding": "2.8.3", + "matchCriteriaId": "126B1CFF-D57B-4702-87D3-021C846308AD" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote", - "source": "vulnreport@tenable.com" + "source": "vulnreport@tenable.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.tenable.com/security/research/tra-2024-14", - "source": "vulnreport@tenable.com" + "source": "vulnreport@tenable.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.tenable.com/security/research/tra-2024-14", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-327xx/CVE-2024-32738.json b/CVE-2024/CVE-2024-327xx/CVE-2024-32738.json index 15927c233b0..dc3c4bce0a6 100644 --- a/CVE-2024/CVE-2024-327xx/CVE-2024-32738.json +++ b/CVE-2024/CVE-2024-327xx/CVE-2024-32738.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32738", "sourceIdentifier": "vulnreport@tenable.com", "published": "2024-05-14T15:37:04.597", - "lastModified": "2024-11-21T09:15:36.000", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:14:57.700", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -51,22 +71,52 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:enterprise:windows:*:*", + "versionEndExcluding": "2.8.3", + "matchCriteriaId": "126B1CFF-D57B-4702-87D3-021C846308AD" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote", - "source": "vulnreport@tenable.com" + "source": "vulnreport@tenable.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.tenable.com/security/research/tra-2024-14", - "source": "vulnreport@tenable.com" + "source": "vulnreport@tenable.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.tenable.com/security/research/tra-2024-14", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-327xx/CVE-2024-32739.json b/CVE-2024/CVE-2024-327xx/CVE-2024-32739.json index dff70ba23f5..b5f64d2ac67 100644 --- a/CVE-2024/CVE-2024-327xx/CVE-2024-32739.json +++ b/CVE-2024/CVE-2024-327xx/CVE-2024-32739.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32739", "sourceIdentifier": "vulnreport@tenable.com", "published": "2024-05-14T15:37:04.897", - "lastModified": "2025-03-28T19:15:21.600", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:15:13.847", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -51,22 +71,52 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:enterprise:windows:*:*", + "versionEndExcluding": "2.8.3", + "matchCriteriaId": "126B1CFF-D57B-4702-87D3-021C846308AD" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote", - "source": "vulnreport@tenable.com" + "source": "vulnreport@tenable.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.tenable.com/security/research/tra-2024-14", - "source": "vulnreport@tenable.com" + "source": "vulnreport@tenable.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.tenable.com/security/research/tra-2024-14", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-330xx/CVE-2024-33004.json b/CVE-2024/CVE-2024-330xx/CVE-2024-33004.json index 34a59c750a2..edb3a741310 100644 --- a/CVE-2024/CVE-2024-330xx/CVE-2024-33004.json +++ b/CVE-2024/CVE-2024-330xx/CVE-2024-33004.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33004", "sourceIdentifier": "cna@sap.com", "published": "2024-05-14T16:17:13.957", - "lastModified": "2024-11-21T09:16:12.917", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:21:52.390", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -61,22 +61,56 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:-:*:*:*", + "matchCriteriaId": "4AA1BB94-FF0C-4D4D-A8EC-F0D8505B966C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:440:*:*:*:-:*:*:*", + "matchCriteriaId": "0670A535-8FDB-45FD-9443-1F24BB5A7E65" + } + ] + } + ] + } + ], "references": [ { "url": "https://me.sap.com/notes/3449093", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Patch" + ] }, { "url": "https://me.sap.com/notes/3449093", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Permissions Required" + ] }, { "url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-363xx/CVE-2024-36358.json b/CVE-2024/CVE-2024-363xx/CVE-2024-36358.json index 736457e4034..03216d324b0 100644 --- a/CVE-2024/CVE-2024-363xx/CVE-2024-36358.json +++ b/CVE-2024/CVE-2024-363xx/CVE-2024-36358.json @@ -2,8 +2,8 @@ "id": "CVE-2024-36358", "sourceIdentifier": "security@trendmicro.com", "published": "2024-06-10T22:15:11.230", - "lastModified": "2025-03-13T14:15:26.933", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-23T12:26:12.277", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, @@ -51,22 +71,697 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1194:*:*:long_term_support:*:*:*", + "matchCriteriaId": "4BE1D2F8-3F0E-4E43-AB20-BB9F280B27EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1304:*:*:long_term_support:*:*:*", + "matchCriteriaId": "5C1275B0-D75C-4EBD-8009-F171C0F53D3B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:*", + "matchCriteriaId": "395BE207-3450-4DD8-A5B4-CA005A8A29E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:*", + "matchCriteriaId": "10692943-0205-42F3-8EBC-64499CC0A3D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:*", + "matchCriteriaId": "F3DDAC1A-C2E5-4FFB-8A69-80819D39CF5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:*", + "matchCriteriaId": "6201FA1A-1F94-46DF-A7EE-6F4DE2910131" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:*", + "matchCriteriaId": "E667A20B-65ED-434F-8A5F-220C87B175EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:*", + "matchCriteriaId": "2CCE7E62-6CBE-476F-A9E5-52790F90E5BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:*", + "matchCriteriaId": "920B4F3B-2D78-4B71-8B65-8AEF6AF2C735" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2395:*:*:long_term_support:*:*:*", + "matchCriteriaId": "C1630066-82A7-45B6-8C9B-5E33544057E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:*", + "matchCriteriaId": "A61BF475-18D9-4246-91C7-7A1B6A7B44AF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2971:*:*:long_term_support:*:*:*", + "matchCriteriaId": "302E31AA-AF51-4869-BA2F-832299A5C648" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:*", + "matchCriteriaId": "9FD0C979-641F-482B-9D05-B3B9A5F6D443" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:*", + "matchCriteriaId": "F56F3E88-3E65-4C3E-932D-6C8404F5A1BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:*", + "matchCriteriaId": "2FF0DE00-851E-4185-8C0C-172252E3E7C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3770:*:*:long_term_support:*:*:*", + "matchCriteriaId": "3BBF5ADC-D0D4-4BF4-989F-84EAF7573855" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:*", + "matchCriteriaId": "87821A85-93F2-422B-8876-CF3729D99594" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:*", + "matchCriteriaId": "0C3E959C-D6D5-4DF0-A26E-95EBDCB8C901" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:*", + "matchCriteriaId": "F2F3C583-2A09-4448-B384-273B48D2B4E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:*", + "matchCriteriaId": "445BA171-0190-429A-8D4F-F857CEA5361E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:*", + "matchCriteriaId": "95889F1E-931E-40E4-99A1-9C1A4A8B0847" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5394:*:*:long_term_support:*:*:*", + "matchCriteriaId": "3E57A0B9-FD42-4BC2-8E77-473C231E8C26" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5512:*:*:long_term_support:*:*:*", + "matchCriteriaId": "9A36042B-CE11-400C-A3E9-675FA01DFD79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5761:*:*:long_term_support:*:*:*", + "matchCriteriaId": "CA857632-5129-484C-9180-DC3B1A7A99E3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5953:*:*:long_term_support:*:*:*", + "matchCriteriaId": "7504575F-3A63-4299-B355-682F495BD769" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6313:*:*:long_term_support:*:*:*", + "matchCriteriaId": "C8B125A6-071C-40BD-BEF8-3349D69B8FBA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6658:*:*:long_term_support:*:*:*", + "matchCriteriaId": "78CC9093-3CB7-486A-AF1A-189EA52BBF43" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6912:*:*:long_term_support:*:*:*", + "matchCriteriaId": "166C9EC4-3A3A-437E-9B71-E8A95808454D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7119:*:*:long_term_support:*:*:*", + "matchCriteriaId": "45F6F599-6DFD-4FAC-A3BC-DA04337FBF99" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7303:*:*:long_term_support:*:*:*", + "matchCriteriaId": "AF3BF95D-BE53-48CF-AC59-7E53B3245E84" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7476:*:*:long_term_support:*:*:*", + "matchCriteriaId": "CA991E32-E28D-4310-8578-DD92033AEEB1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7719:*:*:long_term_support:*:*:*", + "matchCriteriaId": "41CFF915-1DD8-4C9F-8B43-04BCDA0C5068" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7943:*:*:long_term_support:*:*:*", + "matchCriteriaId": "C88FD401-BDA4-4080-B56D-D9A980236A9C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8137:*:*:long_term_support:*:*:*", + "matchCriteriaId": "56A61850-1C9F-420B-88CF-D2D92BF1709E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8268:*:*:long_term_support:*:*:*", + "matchCriteriaId": "6CEB092E-8D28-478E-BEA9-D489EC63D689" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8438:*:*:long_term_support:*:*:*", + "matchCriteriaId": "1CDA7299-C070-405E-BE53-1B235D6C5CC9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8453:*:*:long_term_support:*:*:*", + "matchCriteriaId": "7FC6D105-41D4-41BF-BD43-0EA1C69EC47D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:*", + "matchCriteriaId": "BF1E7ABB-DEF9-4CBD-B269-3091DC1CF2A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:*", + "matchCriteriaId": "AF6B83AD-8517-4952-890B-4CF725407131" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:*", + "matchCriteriaId": "395BE207-3450-4DD8-A5B4-CA005A8A29E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:*", + "matchCriteriaId": "10692943-0205-42F3-8EBC-64499CC0A3D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:*", + "matchCriteriaId": "F3DDAC1A-C2E5-4FFB-8A69-80819D39CF5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:*", + "matchCriteriaId": "6201FA1A-1F94-46DF-A7EE-6F4DE2910131" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:*", + "matchCriteriaId": "E667A20B-65ED-434F-8A5F-220C87B175EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:*", + "matchCriteriaId": "2CCE7E62-6CBE-476F-A9E5-52790F90E5BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:*", + "matchCriteriaId": "920B4F3B-2D78-4B71-8B65-8AEF6AF2C735" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2419:*:*:long_term_support:*:*:*", + "matchCriteriaId": "236653DA-EE2C-4923-A5C8-CC32305626FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:*", + "matchCriteriaId": "A61BF475-18D9-4246-91C7-7A1B6A7B44AF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2740:*:*:long_term_support:*:*:*", + "matchCriteriaId": "DC90635A-4FEB-4F7A-B0BD-D4CCD1183A3B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2921:*:*:long_term_support:*:*:*", + "matchCriteriaId": "6D12CADF-AAA4-4E0B-93EC-81C5C3BDCA47" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:*", + "matchCriteriaId": "9FD0C979-641F-482B-9D05-B3B9A5F6D443" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:*", + "matchCriteriaId": "F56F3E88-3E65-4C3E-932D-6C8404F5A1BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:*", + "matchCriteriaId": "2FF0DE00-851E-4185-8C0C-172252E3E7C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3530:*:*:long_term_support:*:*:*", + "matchCriteriaId": "57A322DB-9E37-4508-B904-51F0305D4B9B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3771:*:*:long_term_support:*:*:*", + "matchCriteriaId": "9CEFF34B-1B17-416F-9068-9CE5DAC0F19D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3964:*:*:long_term_support:*:*:*", + "matchCriteriaId": "87A77C12-0F5C-4EA7-96BA-8B14E2795E69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:*", + "matchCriteriaId": "87821A85-93F2-422B-8876-CF3729D99594" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:*", + "matchCriteriaId": "0C3E959C-D6D5-4DF0-A26E-95EBDCB8C901" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:*", + "matchCriteriaId": "F2F3C583-2A09-4448-B384-273B48D2B4E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:*", + "matchCriteriaId": "445BA171-0190-429A-8D4F-F857CEA5361E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:*", + "matchCriteriaId": "95889F1E-931E-40E4-99A1-9C1A4A8B0847" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5394:*:*:long_term_support:*:*:*", + "matchCriteriaId": "3E57A0B9-FD42-4BC2-8E77-473C231E8C26" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5512:*:*:long_term_support:*:*:*", + "matchCriteriaId": "9A36042B-CE11-400C-A3E9-675FA01DFD79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5810:*:*:long_term_support:*:*:*", + "matchCriteriaId": "73312B15-FF4F-4576-A6DC-90E7DDC16177" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5995:*:*:long_term_support:*:*:*", + "matchCriteriaId": "EC926B09-2153-408D-96D1-339BC6CA3E74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6313:*:*:long_term_support:*:*:*", + "matchCriteriaId": "C8B125A6-071C-40BD-BEF8-3349D69B8FBA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6690:*:*:long_term_support:*:*:*", + "matchCriteriaId": "8798E437-2DF9-4128-95A4-D6E428BB68F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6860:*:*:long_term_support:*:*:*", + "matchCriteriaId": "530A146D-8ACA-4EC3-A431-E732CDCBEF5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7119:*:*:long_term_support:*:*:*", + "matchCriteriaId": "45F6F599-6DFD-4FAC-A3BC-DA04337FBF99" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7303:*:*:long_term_support:*:*:*", + "matchCriteriaId": "AF3BF95D-BE53-48CF-AC59-7E53B3245E84" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7476:*:*:long_term_support:*:*:*", + "matchCriteriaId": "CA991E32-E28D-4310-8578-DD92033AEEB1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7719:*:*:long_term_support:*:*:*", + "matchCriteriaId": "41CFF915-1DD8-4C9F-8B43-04BCDA0C5068" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7943:*:*:long_term_support:*:*:*", + "matchCriteriaId": "C88FD401-BDA4-4080-B56D-D9A980236A9C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8137:*:*:long_term_support:*:*:*", + "matchCriteriaId": "56A61850-1C9F-420B-88CF-D2D92BF1709E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8268:*:*:long_term_support:*:*:*", + "matchCriteriaId": "6CEB092E-8D28-478E-BEA9-D489EC63D689" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8438:*:*:long_term_support:*:*:*", + "matchCriteriaId": "1CDA7299-C070-405E-BE53-1B235D6C5CC9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:*", + "matchCriteriaId": "BF1E7ABB-DEF9-4CBD-B269-3091DC1CF2A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:*", + "matchCriteriaId": "AF6B83AD-8517-4952-890B-4CF725407131" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update700:*:*:long_term_support:*:*:*", + "matchCriteriaId": "26E9FE45-48C7-4745-BD8D-F72907AAC469" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1194:*:*:long_term_support:*:*:*", + "matchCriteriaId": "4BE1D2F8-3F0E-4E43-AB20-BB9F280B27EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1304:*:*:long_term_support:*:*:*", + "matchCriteriaId": "5C1275B0-D75C-4EBD-8009-F171C0F53D3B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:*", + "matchCriteriaId": "395BE207-3450-4DD8-A5B4-CA005A8A29E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:*", + "matchCriteriaId": "10692943-0205-42F3-8EBC-64499CC0A3D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:*", + "matchCriteriaId": "F3DDAC1A-C2E5-4FFB-8A69-80819D39CF5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:*", + "matchCriteriaId": "6201FA1A-1F94-46DF-A7EE-6F4DE2910131" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:*", + "matchCriteriaId": "E667A20B-65ED-434F-8A5F-220C87B175EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:*", + "matchCriteriaId": "2CCE7E62-6CBE-476F-A9E5-52790F90E5BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:*", + "matchCriteriaId": "920B4F3B-2D78-4B71-8B65-8AEF6AF2C735" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2395:*:*:long_term_support:*:*:*", + "matchCriteriaId": "C1630066-82A7-45B6-8C9B-5E33544057E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:*", + "matchCriteriaId": "A61BF475-18D9-4246-91C7-7A1B6A7B44AF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2740:*:*:long_term_support:*:*:*", + "matchCriteriaId": "DC90635A-4FEB-4F7A-B0BD-D4CCD1183A3B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2921:*:*:long_term_support:*:*:*", + "matchCriteriaId": "6D12CADF-AAA4-4E0B-93EC-81C5C3BDCA47" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:*", + "matchCriteriaId": "9FD0C979-641F-482B-9D05-B3B9A5F6D443" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:*", + "matchCriteriaId": "F56F3E88-3E65-4C3E-932D-6C8404F5A1BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:*", + "matchCriteriaId": "2FF0DE00-851E-4185-8C0C-172252E3E7C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3770:*:*:long_term_support:*:*:*", + "matchCriteriaId": "3BBF5ADC-D0D4-4BF4-989F-84EAF7573855" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3964:*:*:long_term_support:*:*:*", + "matchCriteriaId": "87A77C12-0F5C-4EA7-96BA-8B14E2795E69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:*", + "matchCriteriaId": "87821A85-93F2-422B-8876-CF3729D99594" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:*", + "matchCriteriaId": "0C3E959C-D6D5-4DF0-A26E-95EBDCB8C901" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:*", + "matchCriteriaId": "F2F3C583-2A09-4448-B384-273B48D2B4E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:*", + "matchCriteriaId": "445BA171-0190-429A-8D4F-F857CEA5361E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:*", + "matchCriteriaId": "95889F1E-931E-40E4-99A1-9C1A4A8B0847" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5394:*:*:long_term_support:*:*:*", + "matchCriteriaId": "3E57A0B9-FD42-4BC2-8E77-473C231E8C26" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5512:*:*:long_term_support:*:*:*", + "matchCriteriaId": "9A36042B-CE11-400C-A3E9-675FA01DFD79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5761:*:*:long_term_support:*:*:*", + "matchCriteriaId": "CA857632-5129-484C-9180-DC3B1A7A99E3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5953:*:*:long_term_support:*:*:*", + "matchCriteriaId": "7504575F-3A63-4299-B355-682F495BD769" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6313:*:*:long_term_support:*:*:*", + "matchCriteriaId": "C8B125A6-071C-40BD-BEF8-3349D69B8FBA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6658:*:*:long_term_support:*:*:*", + "matchCriteriaId": "78CC9093-3CB7-486A-AF1A-189EA52BBF43" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6912:*:*:long_term_support:*:*:*", + "matchCriteriaId": "166C9EC4-3A3A-437E-9B71-E8A95808454D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7119:*:*:long_term_support:*:*:*", + "matchCriteriaId": "45F6F599-6DFD-4FAC-A3BC-DA04337FBF99" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7303:*:*:long_term_support:*:*:*", + "matchCriteriaId": "AF3BF95D-BE53-48CF-AC59-7E53B3245E84" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7476:*:*:long_term_support:*:*:*", + "matchCriteriaId": "CA991E32-E28D-4310-8578-DD92033AEEB1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7719:*:*:long_term_support:*:*:*", + "matchCriteriaId": "41CFF915-1DD8-4C9F-8B43-04BCDA0C5068" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7943:*:*:long_term_support:*:*:*", + "matchCriteriaId": "C88FD401-BDA4-4080-B56D-D9A980236A9C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8137:*:*:long_term_support:*:*:*", + "matchCriteriaId": "56A61850-1C9F-420B-88CF-D2D92BF1709E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8268:*:*:long_term_support:*:*:*", + "matchCriteriaId": "6CEB092E-8D28-478E-BEA9-D489EC63D689" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8438:*:*:long_term_support:*:*:*", + "matchCriteriaId": "1CDA7299-C070-405E-BE53-1B235D6C5CC9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:*", + "matchCriteriaId": "BF1E7ABB-DEF9-4CBD-B269-3091DC1CF2A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:*", + "matchCriteriaId": "AF6B83AD-8517-4952-890B-4CF725407131" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*", + "matchCriteriaId": "6A90CB3A-9BE7-475C-9E75-6ECAD2106302" + } + ] + } + ] + } + ], "references": [ { "url": "https://success.trendmicro.com/dcx/s/solution/000298151", - "source": "security@trendmicro.com" + "source": "security@trendmicro.com", + "tags": [ + "Broken Link" + ] }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-575/", - "source": "security@trendmicro.com" + "source": "security@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://success.trendmicro.com/dcx/s/solution/000298151", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Broken Link" + ] }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-575/", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-419xx/CVE-2024-41979.json b/CVE-2024/CVE-2024-419xx/CVE-2024-41979.json index 783740071ba..6be1b377066 100644 --- a/CVE-2024/CVE-2024-419xx/CVE-2024-41979.json +++ b/CVE-2024/CVE-2024-419xx/CVE-2024-41979.json @@ -2,8 +2,8 @@ "id": "CVE-2024-41979", "sourceIdentifier": "productcert@siemens.com", "published": "2025-08-12T12:15:31.980", - "lastModified": "2025-08-12T14:25:33.177", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-23T13:46:01.183", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.0, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.1, + "impactScore": 5.9 } ] }, @@ -95,10 +115,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:siemens:opcenter_quality:13.2:*:*:*:*:*:*:*", + "matchCriteriaId": "238C890D-8EBF-4378-B887-89AED294F983" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-382999.html", - "source": "productcert@siemens.com" + "source": "productcert@siemens.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-419xx/CVE-2024-41980.json b/CVE-2024/CVE-2024-419xx/CVE-2024-41980.json index 0883cce0fe0..69f34d4fe09 100644 --- a/CVE-2024/CVE-2024-419xx/CVE-2024-41980.json +++ b/CVE-2024/CVE-2024-419xx/CVE-2024-41980.json @@ -2,8 +2,8 @@ "id": "CVE-2024-41980", "sourceIdentifier": "productcert@siemens.com", "published": "2025-08-12T12:15:32.213", - "lastModified": "2025-08-12T14:25:33.177", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-23T13:42:03.453", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 0.5, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.7, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 3.6 } ] }, @@ -95,10 +115,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:siemens:opcenter_quality:13.2:*:*:*:*:*:*:*", + "matchCriteriaId": "238C890D-8EBF-4378-B887-89AED294F983" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-382999.html", - "source": "productcert@siemens.com" + "source": "productcert@siemens.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-419xx/CVE-2024-41982.json b/CVE-2024/CVE-2024-419xx/CVE-2024-41982.json index 4fbffcbb272..60a2f34374b 100644 --- a/CVE-2024/CVE-2024-419xx/CVE-2024-41982.json +++ b/CVE-2024/CVE-2024-419xx/CVE-2024-41982.json @@ -2,8 +2,8 @@ "id": "CVE-2024-41982", "sourceIdentifier": "productcert@siemens.com", "published": "2025-08-12T12:15:32.410", - "lastModified": "2025-08-12T14:25:33.177", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-23T13:27:35.803", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.7, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 3.6 } ] }, @@ -95,10 +115,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:siemens:opcenter_quality:13.2:*:*:*:*:*:*:*", + "matchCriteriaId": "238C890D-8EBF-4378-B887-89AED294F983" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-382999.html", - "source": "productcert@siemens.com" + "source": "productcert@siemens.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-419xx/CVE-2024-41983.json b/CVE-2024/CVE-2024-419xx/CVE-2024-41983.json index 5da49a2177a..f8154cbfb6c 100644 --- a/CVE-2024/CVE-2024-419xx/CVE-2024-41983.json +++ b/CVE-2024/CVE-2024-419xx/CVE-2024-41983.json @@ -2,8 +2,8 @@ "id": "CVE-2024-41983", "sourceIdentifier": "productcert@siemens.com", "published": "2025-08-12T12:15:32.600", - "lastModified": "2025-08-12T14:25:33.177", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-23T13:26:58.567", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.1, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -95,10 +115,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:siemens:opcenter_quality:13.2:*:*:*:*:*:*:*", + "matchCriteriaId": "238C890D-8EBF-4378-B887-89AED294F983" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-382999.html", - "source": "productcert@siemens.com" + "source": "productcert@siemens.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-48xx/CVE-2024-4822.json b/CVE-2024/CVE-2024-48xx/CVE-2024-4822.json index 684f35e3e76..6a4b45b6945 100644 --- a/CVE-2024/CVE-2024-48xx/CVE-2024-4822.json +++ b/CVE-2024/CVE-2024-48xx/CVE-2024-4822.json @@ -2,8 +2,8 @@ "id": "CVE-2024-4822", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2024-05-14T15:45:13.810", - "lastModified": "2024-11-21T09:43:41.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:26:55.400", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 } ] }, @@ -51,14 +71,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:arox:school_erp_pro\\+responsive:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "519D0E14-E540-405A-A136-3B63206888B4" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-school-erp-proresponsive-arox-solution", - "source": "cve-coordination@incibe.es" + "source": "cve-coordination@incibe.es", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-school-erp-proresponsive-arox-solution", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-48xx/CVE-2024-4823.json b/CVE-2024/CVE-2024-48xx/CVE-2024-4823.json index 7aaa743147d..1e66c78cad6 100644 --- a/CVE-2024/CVE-2024-48xx/CVE-2024-4823.json +++ b/CVE-2024/CVE-2024-48xx/CVE-2024-4823.json @@ -2,8 +2,8 @@ "id": "CVE-2024-4823", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2024-05-14T15:45:14.797", - "lastModified": "2024-11-21T09:43:41.830", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:27:00.927", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 } ] }, @@ -51,14 +71,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:arox:school_erp_pro\\+responsive:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "519D0E14-E540-405A-A136-3B63206888B4" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-school-erp-proresponsive-arox-solution", - "source": "cve-coordination@incibe.es" + "source": "cve-coordination@incibe.es", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-school-erp-proresponsive-arox-solution", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-48xx/CVE-2024-4824.json b/CVE-2024/CVE-2024-48xx/CVE-2024-4824.json index 8d41a61d0c4..2e6a493cee5 100644 --- a/CVE-2024/CVE-2024-48xx/CVE-2024-4824.json +++ b/CVE-2024/CVE-2024-48xx/CVE-2024-4824.json @@ -2,8 +2,8 @@ "id": "CVE-2024-4824", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2024-05-14T15:45:15.703", - "lastModified": "2024-11-21T09:43:41.940", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:27:05.607", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:arox:school_erp_pro\\+responsive:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "519D0E14-E540-405A-A136-3B63206888B4" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-school-erp-proresponsive-arox-solution", - "source": "cve-coordination@incibe.es" + "source": "cve-coordination@incibe.es", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-school-erp-proresponsive-arox-solution", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-525xx/CVE-2024-52560.json b/CVE-2024/CVE-2024-525xx/CVE-2024-52560.json index 80bd65f148a..9310e46e552 100644 --- a/CVE-2024/CVE-2024-525xx/CVE-2024-52560.json +++ b/CVE-2024/CVE-2024-525xx/CVE-2024-52560.json @@ -2,8 +2,8 @@ "id": "CVE-2024-52560", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T03:15:10.573", - "lastModified": "2025-02-27T03:15:10.573", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:05:38.517", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fs/ntfs3: Marcar el inodo como defectuoso tan pronto como se detecte un error en mi_enum_attr() Se ampli\u00f3 la interfaz de la funci\u00f3n `mi_enum_attr()` con un par\u00e1metro adicional, `struct ntfs_inode *ni`, para permitir marcar el inodo como defectuoso tan pronto como se detecte un error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "6.13.4", + "matchCriteriaId": "CD85CE5A-FCD7-4639-9FA5-2FFDE65EF0EE" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2afd4d267e6dbaec8d3ccd4f5396cb84bc67aa2e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d9c699f2c4dc174940ffe8600b20c267897da155", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-544xx/CVE-2024-54456.json b/CVE-2024/CVE-2024-544xx/CVE-2024-54456.json index 0f063a0e262..f9ae260b6e3 100644 --- a/CVE-2024/CVE-2024-544xx/CVE-2024-54456.json +++ b/CVE-2024/CVE-2024-544xx/CVE-2024-54456.json @@ -2,8 +2,8 @@ "id": "CVE-2024-54456", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T03:15:10.667", - "lastModified": "2025-02-27T03:15:10.667", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:05:11.067", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el n\u00facleo de Linux, se ha resuelto la siguiente vulnerabilidad: NFS: Se solucion\u00f3 un posible desbordamiento de b\u00fafer en nfs_sysfs_link_rpc_client() cuyo nombre es char[64], donde el tama\u00f1o de clnt->cl_program->name sigue siendo desconocido. Invocar strcat() directamente tambi\u00e9n provocar\u00e1 un posible desbordamiento de b\u00fafer. C\u00e1mbielos a strscpy() y strncat() para solucionar posibles problemas." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.5", + "versionEndExcluding": "6.6.79", + "matchCriteriaId": "A28256FB-47AC-4A7F-9947-2A08653FC35E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.16", + "matchCriteriaId": "13C8DB18-FC60-425F-84E5-3EDDEC61B2FC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.4", + "matchCriteriaId": "2A2093ED-74A9-43F9-AC72-50030F374EA4" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/19b3ca651b4b473878c73539febe477905041442", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/49fd4e34751e90e6df009b70cd0659dc839e7ca8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dd8830779b77f4d1206d28d02ad56a03fc0e78f7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e8e0eb5601d4a6c74c336e3710afe3a0348c469d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-55xx/CVE-2024-5523.json b/CVE-2024/CVE-2024-55xx/CVE-2024-5523.json index ad6a456a42a..8bb27325ab5 100644 --- a/CVE-2024/CVE-2024-55xx/CVE-2024-5523.json +++ b/CVE-2024/CVE-2024-55xx/CVE-2024-5523.json @@ -2,8 +2,8 @@ "id": "CVE-2024-5523", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2024-05-31T08:15:08.870", - "lastModified": "2024-11-21T09:47:51.940", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-23T12:27:58.420", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:codester:astrotalks:2023-10-03:*:*:*:*:*:*:*", + "matchCriteriaId": "1EB46686-8765-41BE-8E58-096D3238BE10" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-astrotalks", - "source": "cve-coordination@incibe.es" + "source": "cve-coordination@incibe.es", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-astrotalks", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-55xx/CVE-2024-5524.json b/CVE-2024/CVE-2024-55xx/CVE-2024-5524.json index 29bfdf3f9f1..9abaf9c1e89 100644 --- a/CVE-2024/CVE-2024-55xx/CVE-2024-5524.json +++ b/CVE-2024/CVE-2024-55xx/CVE-2024-5524.json @@ -2,8 +2,8 @@ "id": "CVE-2024-5524", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2024-05-31T08:15:09.127", - "lastModified": "2024-11-21T09:47:52.060", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-23T12:23:10.210", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:codester:astrotalks:2023-10-03:*:*:*:*:*:*:*", + "matchCriteriaId": "1EB46686-8765-41BE-8E58-096D3238BE10" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-astrotalks", - "source": "cve-coordination@incibe.es" + "source": "cve-coordination@incibe.es", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-astrotalks", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-55xx/CVE-2024-5525.json b/CVE-2024/CVE-2024-55xx/CVE-2024-5525.json index 8bf3351cc7e..bd49496c5cf 100644 --- a/CVE-2024/CVE-2024-55xx/CVE-2024-5525.json +++ b/CVE-2024/CVE-2024-55xx/CVE-2024-5525.json @@ -2,8 +2,8 @@ "id": "CVE-2024-5525", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2024-05-31T08:15:09.357", - "lastModified": "2024-11-21T09:47:52.173", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-23T12:24:36.847", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -51,14 +71,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:codester:astrotalks:2023-10-03:*:*:*:*:*:*:*", + "matchCriteriaId": "1EB46686-8765-41BE-8E58-096D3238BE10" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-astrotalks", - "source": "cve-coordination@incibe.es" + "source": "cve-coordination@incibe.es", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-astrotalks", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-578xx/CVE-2024-57852.json b/CVE-2024/CVE-2024-578xx/CVE-2024-57852.json index 9c882334804..2dc975d358c 100644 --- a/CVE-2024/CVE-2024-578xx/CVE-2024-57852.json +++ b/CVE-2024/CVE-2024-578xx/CVE-2024-57852.json @@ -2,8 +2,8 @@ "id": "CVE-2024-57852", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T03:15:10.977", - "lastModified": "2025-02-27T03:15:10.977", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:04:42.310", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,106 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: firmware: qcom: scm: smc: Handle missing SCM device el commit ca61d6836e6f (\"firmware: qcom: scm: fix a NULL-pointer dereference\") hace expl\u00edcito que qcom_scm_get_tzmem_pool() puede devolver NULL, por lo tanto, sus usuarios deben manejar esto." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11.8", + "versionEndExcluding": "6.12", + "matchCriteriaId": "C9D2BD2C-A19D-4E5F-828D-0CEED87118B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12.1", + "versionEndExcluding": "6.12.16", + "matchCriteriaId": "E866CE59-6E28-4AC6-8D8B-EF69BB5A42F9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.4", + "matchCriteriaId": "2A2093ED-74A9-43F9-AC72-50030F374EA4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:-:*:*:*:*:*:*", + "matchCriteriaId": "0E698080-7669-4132-8817-4C674EEBCE54" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc7:*:*:*:*:*:*", + "matchCriteriaId": "1EF8CD82-1EAE-4254-9545-F85AB94CF90F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/57a811c0886f3f3677bb4619502b35b5bb917f2e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/94f48ecf0a538019ca2025e0b0da391f8e7cc58c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cd955b75849b58b650ca3f87b83bd78cde1da8bc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-580xx/CVE-2024-58001.json b/CVE-2024/CVE-2024-580xx/CVE-2024-58001.json index 097c8d95378..7ee03017673 100644 --- a/CVE-2024/CVE-2024-580xx/CVE-2024-58001.json +++ b/CVE-2024/CVE-2024-580xx/CVE-2024-58001.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58001", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T03:15:11.080", - "lastModified": "2025-03-13T13:15:43.413", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:05:00.193", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,158 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ocfs2: gestiona correctamente un error de lectura de enlace simb\u00f3lico Serie de parches \"Convertir ocfs2 para usar folios\". Mark hizo una conversi\u00f3n de ocfs2 para usar folios y me lo envi\u00f3 como un parche gigante para revisi\u00f3n ;-) As\u00ed que lo rehice como parches individuales y le di cr\u00e9dito a Mark por los parches donde su c\u00f3digo es sustancialmente el mismo. No es una mala forma de hacerlo; su parche ten\u00eda algunos errores y mis parches ten\u00edan algunos errores. Con suerte, todos nuestros errores fueron diferentes entre s\u00ed. \u00a1Y con suerte a Mark le gustan todos los cambios que hice en su c\u00f3digo! Este parche (de 23): Si no podemos leer el b\u00fafer, aseg\u00farese de desbloquear la p\u00e1gina antes de regresar." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.4.291", + "matchCriteriaId": "7D4BCF5F-A64A-4766-A4C7-E33396F9300A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.235", + "matchCriteriaId": "545121FA-DE31-4154-9446-C2000FB4104D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.179", + "matchCriteriaId": "C708062C-4E1B-465F-AE6D-C09C46400875" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.129", + "matchCriteriaId": "2DA5009C-C9B9-4A1D-9B96-78427E8F232C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.78", + "matchCriteriaId": "0C58261F-EDFB-4A12-8CCD-F12101482030" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.14", + "matchCriteriaId": "033BB7EE-C9A2-45EA-BAC9-87BB9D951BCD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.3", + "matchCriteriaId": "0E92CEE3-1FC3-4AFC-A513-DEDBA7414F00" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2b4c2094da6d84e69b843dd3317902e977bf64bd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/52a326f93ceb9348264fddf7bab6e345db69e08c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5e3b3ec7c3cb5ba5629a766e4f0926db72cf0a1f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6e143eb4ab83c24e7ad3e3d8e7daa241d9c38377", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8aee4184c5b79e486598c15aa80687c77f6f6e6e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/afa8003f8db62e46c4b171cbf4cec2824148b4f7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b6833b38984d1e9f20dd80f9ec9050c10d687f30", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cd3e22b206189cbb4a94229002141e1529f83746", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-580xx/CVE-2024-58003.json b/CVE-2024/CVE-2024-580xx/CVE-2024-58003.json index 20b4e84df70..4e3b446218a 100644 --- a/CVE-2024/CVE-2024-580xx/CVE-2024-58003.json +++ b/CVE-2024/CVE-2024-580xx/CVE-2024-58003.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58003", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T03:15:11.277", - "lastModified": "2025-02-27T03:15:11.277", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:04:16.960", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: i2c: ds90ub9x3: Fix extra fwnode_handle_put() Los controladores ub913 y ub953 llaman a fwnode_handle_put(priv->sd.fwnode) como parte de su proceso de eliminaci\u00f3n y, si el controlador se elimina varias veces, eventualmente conduce a un \"desbordamiento\" de put, posiblemente causando corrupci\u00f3n de memoria o falla. fwnode_handle_put() es un remanente del commit 905f88ccebb1 (\"media: i2c: ds90ub9x3: Fix sub-device matching\"), que cambi\u00f3 el c\u00f3digo relacionado con sd.fwnode, pero no elimin\u00f3 estas llamadas fwnode_handle_put()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6", + "versionEndExcluding": "6.6.78", + "matchCriteriaId": "5F1F895A-4A5A-4A7D-BF35-189CB10EACE2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.14", + "matchCriteriaId": "033BB7EE-C9A2-45EA-BAC9-87BB9D951BCD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.3", + "matchCriteriaId": "0E92CEE3-1FC3-4AFC-A513-DEDBA7414F00" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/474d7baf91d37bc411fa60de5bbf03c9dd82e18a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/60b45ece41c5632a3a3274115a401cb244180646", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/70743d6a8b256225675711e7983825f1be86062d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f4e4373322f8d4c19721831f7fb989e52d30dab0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-580xx/CVE-2024-58004.json b/CVE-2024/CVE-2024-580xx/CVE-2024-58004.json index b6b4d25e856..a548a0fc607 100644 --- a/CVE-2024/CVE-2024-580xx/CVE-2024-58004.json +++ b/CVE-2024/CVE-2024-580xx/CVE-2024-58004.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58004", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T03:15:11.380", - "lastModified": "2025-02-27T03:15:11.380", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:04:24.757", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: intel/ipu6: eliminar solicitud de QoS de latencia de CPU en caso de error Corrija la corrupci\u00f3n de la lista de QoS de latencia de CPU como se muestra a continuaci\u00f3n. Ocurre cuando no eliminamos la solicitud de latencia de CPU en la ruta de error y liberamos la memoria correspondiente. [ 30.634378] l7 kernel: list_add corruption. prev->next should be next (ffffffff9645e960), but was 0000000100100001. (prev=ffff8e9e877e20a8). [ 30.634388] l7 kernel: WARNING: CPU: 2 PID: 2008 at lib/list_debug.c:32 __list_add_valid_or_report+0x83/0xa0 [ 30.634640] l7 kernel: Call Trace: [ 30.634650] l7 kernel: [ 30.634659] l7 kernel: ? __list_add_valid_or_report+0x83/0xa0 [ 30.634669] l7 kernel: ? __warn.cold+0x93/0xf6 [ 30.634678] l7 kernel: ? __list_add_valid_or_report+0x83/0xa0 [ 30.634690] l7 kernel: ? report_bug+0xff/0x140 [ 30.634702] l7 kernel: ? handle_bug+0x58/0x90 [ 30.634712] l7 kernel: ? exc_invalid_op+0x17/0x70 [ 30.634723] l7 kernel: ? asm_exc_invalid_op+0x1a/0x20 [ 30.634733] l7 kernel: ? __list_add_valid_or_report+0x83/0xa0 [ 30.634742] l7 kernel: plist_add+0xdd/0x140 [ 30.634754] l7 kernel: pm_qos_update_target+0xa0/0x1f0 [ 30.634764] l7 kernel: cpu_latency_qos_update_request+0x61/0xc0 [ 30.634773] l7 kernel: intel_dp_aux_xfer+0x4c7/0x6e0 [i915 1f824655ed04687c2b0d23dbce759fa785f6d033] " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.10", + "versionEndExcluding": "6.12.14", + "matchCriteriaId": "39B6CD9F-15B4-4B45-976A-23B03B501740" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.3", + "matchCriteriaId": "0E92CEE3-1FC3-4AFC-A513-DEDBA7414F00" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1496ec94bd38bdb25ca13b1dd4f8e7a6176ea89d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/95275736185ecb71dc97a71d8d9d19e4ffb0a9eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/facb541ff0805314e0b56e508f7d3cbd07af513c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-580xx/CVE-2024-58006.json b/CVE-2024/CVE-2024-580xx/CVE-2024-58006.json index af2b8cb8113..6855c03eeba 100644 --- a/CVE-2024/CVE-2024-580xx/CVE-2024-58006.json +++ b/CVE-2024/CVE-2024-580xx/CVE-2024-58006.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58006", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T03:15:11.583", - "lastModified": "2025-02-27T03:15:11.583", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:04:07.040", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI: dwc: ep: Impedir cambiar el tama\u00f1o/indicadores de BAR en pci_epc_set_bar() En el commit 4284c88fff0e (\"PCI: designware-ep: Permitir que pci_epc_set_bar() actualice la direcci\u00f3n del mapa de entrada\"), se modific\u00f3 set_bar() para admitir el cambio din\u00e1mico de la direcci\u00f3n f\u00edsica de respaldo de un BAR que ya estaba configurado. Esto significa que se puede llamar a set_bar() dos veces, sin llamar nunca a clear_bar() (ya que llamar a clear_bar() borrar\u00eda la direcci\u00f3n PCI del BAR asignada por el host). Esto solo se puede hacer si el nuevo tama\u00f1o/indicadores de BAR no difieren de la configuraci\u00f3n de BAR existente. Agregue estas comprobaciones faltantes. Si permitimos que set_bar() establezca, por ejemplo, un nuevo tama\u00f1o de BAR que difiere del tama\u00f1o de BAR existente, el nuevo rango de traducci\u00f3n de direcciones ser\u00e1 m\u00e1s peque\u00f1o que el tama\u00f1o de BAR ya determinado por el host, lo que significar\u00eda que una lectura m\u00e1s all\u00e1 del nuevo tama\u00f1o de BAR pasar\u00eda la iATU sin traducir, lo que podr\u00eda permitir que el host lea memoria que no pertenece a la nueva estructura pci_epf_bar. Mientras tanto, agregue comentarios que aclaren el soporte para cambiar din\u00e1micamente la direcci\u00f3n f\u00edsica de un BAR. (Lo cual tambi\u00e9n faltaba)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.12.14", + "matchCriteriaId": "8FE883B1-A489-49BC-BB7A-E21F9054092B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.3", + "matchCriteriaId": "0E92CEE3-1FC3-4AFC-A513-DEDBA7414F00" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3229c15d6267de8e704b4085df8a82a5af2d63eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3708acbd5f169ebafe1faa519cb28adc56295546", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b5cacfd067060c75088363ed3e19779078be2755", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-580xx/CVE-2024-58008.json b/CVE-2024/CVE-2024-580xx/CVE-2024-58008.json index 9c7e8068e59..d73c410fa93 100644 --- a/CVE-2024/CVE-2024-580xx/CVE-2024-58008.json +++ b/CVE-2024/CVE-2024-580xx/CVE-2024-58008.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58008", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T03:15:11.780", - "lastModified": "2025-02-27T03:15:11.780", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:03:58.417", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,121 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KEYS: trusted: dcp: corrige el uso incorrecto de sg con CONFIG_VMAP_STACK=y Con las direcciones de pila vmalloc habilitadas (CONFIG_VMAP_STACK=y), las claves confiables de DCP pueden fallar durante el cifrado y descifrado de la clave de cifrado de blobs a trav\u00e9s del controlador de cifrado DCP. Esto se debe al uso incorrecto de sg_init_one() con b\u00faferes de pila vmalloc (plain_key_blob). Solucione esto utilizando siempre kmalloc() para los b\u00faferes que le damos al controlador de cifrado DCP." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.10.7", + "versionEndExcluding": "6.11", + "matchCriteriaId": "48B1FCEA-70A6-45BD-A39B-9184638703FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11.1", + "versionEndExcluding": "6.12.14", + "matchCriteriaId": "1192C895-1E13-4705-9775-3C530EDC8826" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.3", + "matchCriteriaId": "0E92CEE3-1FC3-4AFC-A513-DEDBA7414F00" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:-:*:*:*:*:*:*", + "matchCriteriaId": "4770BA57-3F3F-493B-8608-EC3B25254949" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*", + "matchCriteriaId": "39889A68-6D34-47A6-82FC-CD0BF23D6754" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*", + "matchCriteriaId": "B8383ABF-1457-401F-9B61-EE50F4C61F4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:rc6:*:*:*:*:*:*", + "matchCriteriaId": "B77A9280-37E6-49AD-B559-5B23A3B1DC3D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:rc7:*:*:*:*:*:*", + "matchCriteriaId": "DE5298B3-04B4-4F3E-B186-01A58B5C75A6" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3192f1c54dddb9b5820bf5e8677809949d8e9c66", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3355594de46fb1cba663f12b9644b664b8a609f4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e8d9fab39d1f87b52932646b2f1e7877aa3fc0f4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-103xx/CVE-2025-10355.json b/CVE-2025/CVE-2025-103xx/CVE-2025-10355.json new file mode 100644 index 00000000000..ca523236ad6 --- /dev/null +++ b/CVE-2025/CVE-2025-103xx/CVE-2025-10355.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-10355", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-10-23T12:15:29.840", + "lastModified": "2025-10-23T12:15:29.840", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Open redirection vulnerability in MOLGENIS EMX2 v11.14.0. This vulnerability allows an attacker to create a malicious URL using a manipulated redirection parameter, potentially leading users to phishing sites or other malicious destinations via \u201c/%2f%2f\u201d." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-601" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/open-redirection-vulnerability-molgenis-emx2", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-107xx/CVE-2025-10705.json b/CVE-2025/CVE-2025-107xx/CVE-2025-10705.json new file mode 100644 index 00000000000..57d50c20733 --- /dev/null +++ b/CVE-2025/CVE-2025-107xx/CVE-2025-10705.json @@ -0,0 +1,72 @@ +{ + "id": "CVE-2025-10705", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-23T13:15:38.353", + "lastModified": "2025-10-23T13:15:38.353", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The MxChat \u2013 AI Chatbot for WordPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.4.6. This is due to insufficient validation of user-supplied URLs in the PDF processing functionality. This makes it possible for unauthenticated attackers to make the WordPress server perform HTTP requests to arbitrary destinations via the mxchat_handle_chat_request AJAX action." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/mxchat-basic/tags/2.4.1/includes/class-mxchat-integrator.php#L1090", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/mxchat-basic/tags/2.4.1/includes/class-mxchat-integrator.php#L1108", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/mxchat-basic/tags/2.4.1/includes/class-mxchat-integrator.php#L2360", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3378505/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c6ca63b8-b437-4e34-a57e-c3d956fbd102?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-110xx/CVE-2025-11023.json b/CVE-2025/CVE-2025-110xx/CVE-2025-11023.json new file mode 100644 index 00000000000..44a553b272d --- /dev/null +++ b/CVE-2025/CVE-2025-110xx/CVE-2025-11023.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-11023", + "sourceIdentifier": "iletisim@usom.gov.tr", + "published": "2025-10-23T13:15:44.173", + "lastModified": "2025-10-23T13:15:44.173", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Inclusion of Functionality from Untrusted Control Sphere, Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala allows PHP Local File Inclusion.This issue affects AcBakImzala: before v5.1.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + }, + { + "lang": "en", + "value": "CWE-829" + } + ] + } + ], + "references": [ + { + "url": "https://www.usom.gov.tr/bildirim/tr-25-0356", + "source": "iletisim@usom.gov.tr" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-111xx/CVE-2025-11128.json b/CVE-2025/CVE-2025-111xx/CVE-2025-11128.json new file mode 100644 index 00000000000..ce30971211f --- /dev/null +++ b/CVE-2025/CVE-2025-111xx/CVE-2025-11128.json @@ -0,0 +1,76 @@ +{ + "id": "CVE-2025-11128", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-23T13:15:44.717", + "lastModified": "2025-10-23T13:15:44.717", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The RSS Aggregator by Feedzy \u2013 Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.1.0 via the 'feedzy_sanitize_feeds' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query information from internal services." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", + "baseScore": 5.0, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/trunk/includes/gutenberg/feedzy-rss-feeds-gutenberg-block.php#L280", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/trunk/includes/gutenberg/feedzy-rss-feeds-gutenberg-block.php#L309", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/trunk/includes/gutenberg/feedzy-rss-feeds-gutenberg-block.php#L336", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/trunk/includes/gutenberg/feedzy-rss-feeds-gutenberg-block.php#L399", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3378828/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c33ec58f-3e83-425a-9f0f-5e529be15e05?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21044.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21044.json index 7f6b7b2920b..cce00674cee 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21044.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21044.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21044", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:38.200", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:43:38.350", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,595 @@ }, "exploitabilityScore": 0.5, "impactScore": 5.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.8, + "impactScore": 3.6 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", + "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDE4D65E-8F9B-4810-AED6-95564A97D741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AC42E785-02BF-4F27-B5CF-49572A2DBC8E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6239D93F-CA0E-4120-96A1-FB63276EAEE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "25F19D02-1FFC-48AF-9CB8-063C459E7A4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "CD382E2D-0B51-4908-989A-88E083FC85BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "38B7AB56-AB65-4557-A91C-40CA2FD12351" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "858B0736-2272-4D5A-A77F-47023D21F7D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "61D507C0-086B-4139-A560-126964DFA579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "952CA843-7CF0-4424-BDA4-3F2A93E077B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "39F64BAA-2E49-4919-A940-219391383D5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "57B125ED-D939-4CBC-9E96-BBCF02402A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "07AC19C6-D245-4C3A-90CC-A931A901EA0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FDA1685E-D101-46F6-8857-7F0894E07748" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B6871BC1-19F4-4F0C-88D8-4000590D8D5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4684DF1E-B783-4C81-A3D0-D09AD2610866" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9FA72654-2389-4709-BC70-59EC4349A826" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "E346DCBD-7DEB-464F-B917-8624BE87D646" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C89A24-B07F-43D2-AE83-8F4F03D6C114" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "5697984D-08BA-412F-9BDF-26B658B0ADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "72B97155-E841-4267-9522-A81F8B139A79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "E4187BA1-226E-4976-A642-2F6DAE85538E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "73F22C26-52FC-42A7-B263-0CC7770A8C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "BFB2B338-5E04-4136-939F-749A3B163656" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3D30C02C-91FB-4D29-AF49-7903158E8FEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "2F5CA412-BAAF-4378-8ECD-95A404D4E19B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4C17A088-2CA1-4818-940F-2FEFA881D598" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "C581B7EE-CD08-4D6E-8858-EA8FA631F84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "1DD187E2-2655-407D-87F9-135A9D45F783" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3651863E-81D7-4079-A644-C3D834AF62F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21046.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21046.json index 639f805df50..87142e017a9 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21046.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21046.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21046", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:39.713", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:43:45.953", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -35,10 +35,557 @@ } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", + "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDE4D65E-8F9B-4810-AED6-95564A97D741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AC42E785-02BF-4F27-B5CF-49572A2DBC8E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6239D93F-CA0E-4120-96A1-FB63276EAEE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "25F19D02-1FFC-48AF-9CB8-063C459E7A4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "CD382E2D-0B51-4908-989A-88E083FC85BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "38B7AB56-AB65-4557-A91C-40CA2FD12351" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "858B0736-2272-4D5A-A77F-47023D21F7D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "61D507C0-086B-4139-A560-126964DFA579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "952CA843-7CF0-4424-BDA4-3F2A93E077B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "39F64BAA-2E49-4919-A940-219391383D5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "57B125ED-D939-4CBC-9E96-BBCF02402A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "07AC19C6-D245-4C3A-90CC-A931A901EA0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FDA1685E-D101-46F6-8857-7F0894E07748" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B6871BC1-19F4-4F0C-88D8-4000590D8D5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4684DF1E-B783-4C81-A3D0-D09AD2610866" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9FA72654-2389-4709-BC70-59EC4349A826" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "E346DCBD-7DEB-464F-B917-8624BE87D646" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C89A24-B07F-43D2-AE83-8F4F03D6C114" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "5697984D-08BA-412F-9BDF-26B658B0ADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "72B97155-E841-4267-9522-A81F8B139A79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "E4187BA1-226E-4976-A642-2F6DAE85538E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "73F22C26-52FC-42A7-B263-0CC7770A8C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "BFB2B338-5E04-4136-939F-749A3B163656" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3D30C02C-91FB-4D29-AF49-7903158E8FEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "2F5CA412-BAAF-4378-8ECD-95A404D4E19B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4C17A088-2CA1-4818-940F-2FEFA881D598" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "C581B7EE-CD08-4D6E-8858-EA8FA631F84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "1DD187E2-2655-407D-87F9-135A9D45F783" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3651863E-81D7-4079-A644-C3D834AF62F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21047.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21047.json index 32ca09f8c83..6aa986e8a1a 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21047.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21047.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21047", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:39.900", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:43:14.327", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,355 @@ }, "exploitabilityScore": 0.9, "impactScore": 4.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.9, + "impactScore": 5.9 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21048.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21048.json index 90263500cef..4a1d8779f1b 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21048.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21048.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21048", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:40.087", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:42:48.040", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,595 @@ }, "exploitabilityScore": 0.8, "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", + "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDE4D65E-8F9B-4810-AED6-95564A97D741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AC42E785-02BF-4F27-B5CF-49572A2DBC8E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6239D93F-CA0E-4120-96A1-FB63276EAEE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "25F19D02-1FFC-48AF-9CB8-063C459E7A4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "CD382E2D-0B51-4908-989A-88E083FC85BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "38B7AB56-AB65-4557-A91C-40CA2FD12351" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "858B0736-2272-4D5A-A77F-47023D21F7D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "61D507C0-086B-4139-A560-126964DFA579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "952CA843-7CF0-4424-BDA4-3F2A93E077B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "39F64BAA-2E49-4919-A940-219391383D5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "57B125ED-D939-4CBC-9E96-BBCF02402A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "07AC19C6-D245-4C3A-90CC-A931A901EA0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FDA1685E-D101-46F6-8857-7F0894E07748" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B6871BC1-19F4-4F0C-88D8-4000590D8D5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4684DF1E-B783-4C81-A3D0-D09AD2610866" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9FA72654-2389-4709-BC70-59EC4349A826" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "E346DCBD-7DEB-464F-B917-8624BE87D646" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C89A24-B07F-43D2-AE83-8F4F03D6C114" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "5697984D-08BA-412F-9BDF-26B658B0ADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "72B97155-E841-4267-9522-A81F8B139A79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "E4187BA1-226E-4976-A642-2F6DAE85538E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "73F22C26-52FC-42A7-B263-0CC7770A8C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "BFB2B338-5E04-4136-939F-749A3B163656" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3D30C02C-91FB-4D29-AF49-7903158E8FEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "2F5CA412-BAAF-4378-8ECD-95A404D4E19B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4C17A088-2CA1-4818-940F-2FEFA881D598" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "C581B7EE-CD08-4D6E-8858-EA8FA631F84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "1DD187E2-2655-407D-87F9-135A9D45F783" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3651863E-81D7-4079-A644-C3D834AF62F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21049.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21049.json index 383024b8e0d..5a3acfefa2b 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21049.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21049.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21049", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:40.267", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:42:21.107", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -35,10 +35,92 @@ } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21050.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21050.json index 1fde8db5970..6e2ea870221 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21050.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21050.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21050", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:40.427", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:42:56.973", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,580 @@ }, "exploitabilityScore": 2.5, "impactScore": 4.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", + "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDE4D65E-8F9B-4810-AED6-95564A97D741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AC42E785-02BF-4F27-B5CF-49572A2DBC8E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6239D93F-CA0E-4120-96A1-FB63276EAEE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "25F19D02-1FFC-48AF-9CB8-063C459E7A4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "CD382E2D-0B51-4908-989A-88E083FC85BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "38B7AB56-AB65-4557-A91C-40CA2FD12351" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "858B0736-2272-4D5A-A77F-47023D21F7D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "61D507C0-086B-4139-A560-126964DFA579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "952CA843-7CF0-4424-BDA4-3F2A93E077B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "39F64BAA-2E49-4919-A940-219391383D5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "57B125ED-D939-4CBC-9E96-BBCF02402A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "07AC19C6-D245-4C3A-90CC-A931A901EA0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FDA1685E-D101-46F6-8857-7F0894E07748" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B6871BC1-19F4-4F0C-88D8-4000590D8D5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4684DF1E-B783-4C81-A3D0-D09AD2610866" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9FA72654-2389-4709-BC70-59EC4349A826" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "E346DCBD-7DEB-464F-B917-8624BE87D646" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C89A24-B07F-43D2-AE83-8F4F03D6C114" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "5697984D-08BA-412F-9BDF-26B658B0ADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "72B97155-E841-4267-9522-A81F8B139A79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "E4187BA1-226E-4976-A642-2F6DAE85538E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "73F22C26-52FC-42A7-B263-0CC7770A8C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "BFB2B338-5E04-4136-939F-749A3B163656" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3D30C02C-91FB-4D29-AF49-7903158E8FEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "2F5CA412-BAAF-4378-8ECD-95A404D4E19B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4C17A088-2CA1-4818-940F-2FEFA881D598" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "C581B7EE-CD08-4D6E-8858-EA8FA631F84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "1DD187E2-2655-407D-87F9-135A9D45F783" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3651863E-81D7-4079-A644-C3D834AF62F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21051.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21051.json index 28ec37f0285..c4d44fd1c84 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21051.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21051.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21051", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:40.593", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:42:04.237", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,595 @@ }, "exploitabilityScore": 2.5, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", + "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDE4D65E-8F9B-4810-AED6-95564A97D741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AC42E785-02BF-4F27-B5CF-49572A2DBC8E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6239D93F-CA0E-4120-96A1-FB63276EAEE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "25F19D02-1FFC-48AF-9CB8-063C459E7A4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "CD382E2D-0B51-4908-989A-88E083FC85BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "38B7AB56-AB65-4557-A91C-40CA2FD12351" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "858B0736-2272-4D5A-A77F-47023D21F7D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "61D507C0-086B-4139-A560-126964DFA579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "952CA843-7CF0-4424-BDA4-3F2A93E077B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "39F64BAA-2E49-4919-A940-219391383D5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "57B125ED-D939-4CBC-9E96-BBCF02402A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "07AC19C6-D245-4C3A-90CC-A931A901EA0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FDA1685E-D101-46F6-8857-7F0894E07748" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B6871BC1-19F4-4F0C-88D8-4000590D8D5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4684DF1E-B783-4C81-A3D0-D09AD2610866" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9FA72654-2389-4709-BC70-59EC4349A826" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "E346DCBD-7DEB-464F-B917-8624BE87D646" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C89A24-B07F-43D2-AE83-8F4F03D6C114" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "5697984D-08BA-412F-9BDF-26B658B0ADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "72B97155-E841-4267-9522-A81F8B139A79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "E4187BA1-226E-4976-A642-2F6DAE85538E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "73F22C26-52FC-42A7-B263-0CC7770A8C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "BFB2B338-5E04-4136-939F-749A3B163656" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3D30C02C-91FB-4D29-AF49-7903158E8FEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "2F5CA412-BAAF-4378-8ECD-95A404D4E19B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4C17A088-2CA1-4818-940F-2FEFA881D598" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "C581B7EE-CD08-4D6E-8858-EA8FA631F84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "1DD187E2-2655-407D-87F9-135A9D45F783" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3651863E-81D7-4079-A644-C3D834AF62F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21052.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21052.json index cccb51f78ad..4af383390f7 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21052.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21052.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21052", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:40.753", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:41:53.497", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,595 @@ }, "exploitabilityScore": 2.5, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", + "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDE4D65E-8F9B-4810-AED6-95564A97D741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AC42E785-02BF-4F27-B5CF-49572A2DBC8E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6239D93F-CA0E-4120-96A1-FB63276EAEE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "25F19D02-1FFC-48AF-9CB8-063C459E7A4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "CD382E2D-0B51-4908-989A-88E083FC85BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "38B7AB56-AB65-4557-A91C-40CA2FD12351" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "858B0736-2272-4D5A-A77F-47023D21F7D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "61D507C0-086B-4139-A560-126964DFA579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "952CA843-7CF0-4424-BDA4-3F2A93E077B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "39F64BAA-2E49-4919-A940-219391383D5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "57B125ED-D939-4CBC-9E96-BBCF02402A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "07AC19C6-D245-4C3A-90CC-A931A901EA0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FDA1685E-D101-46F6-8857-7F0894E07748" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B6871BC1-19F4-4F0C-88D8-4000590D8D5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4684DF1E-B783-4C81-A3D0-D09AD2610866" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9FA72654-2389-4709-BC70-59EC4349A826" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "E346DCBD-7DEB-464F-B917-8624BE87D646" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C89A24-B07F-43D2-AE83-8F4F03D6C114" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "5697984D-08BA-412F-9BDF-26B658B0ADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "72B97155-E841-4267-9522-A81F8B139A79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "E4187BA1-226E-4976-A642-2F6DAE85538E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "73F22C26-52FC-42A7-B263-0CC7770A8C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "BFB2B338-5E04-4136-939F-749A3B163656" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3D30C02C-91FB-4D29-AF49-7903158E8FEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "2F5CA412-BAAF-4378-8ECD-95A404D4E19B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4C17A088-2CA1-4818-940F-2FEFA881D598" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "C581B7EE-CD08-4D6E-8858-EA8FA631F84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "1DD187E2-2655-407D-87F9-135A9D45F783" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3651863E-81D7-4079-A644-C3D834AF62F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21053.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21053.json index a6a8e258259..706bca57120 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21053.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21053.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21053", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:40.910", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:41:45.040", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,595 @@ }, "exploitabilityScore": 2.5, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", + "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDE4D65E-8F9B-4810-AED6-95564A97D741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AC42E785-02BF-4F27-B5CF-49572A2DBC8E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6239D93F-CA0E-4120-96A1-FB63276EAEE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "25F19D02-1FFC-48AF-9CB8-063C459E7A4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "CD382E2D-0B51-4908-989A-88E083FC85BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "38B7AB56-AB65-4557-A91C-40CA2FD12351" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "858B0736-2272-4D5A-A77F-47023D21F7D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "61D507C0-086B-4139-A560-126964DFA579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "952CA843-7CF0-4424-BDA4-3F2A93E077B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "39F64BAA-2E49-4919-A940-219391383D5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "57B125ED-D939-4CBC-9E96-BBCF02402A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "07AC19C6-D245-4C3A-90CC-A931A901EA0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FDA1685E-D101-46F6-8857-7F0894E07748" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B6871BC1-19F4-4F0C-88D8-4000590D8D5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4684DF1E-B783-4C81-A3D0-D09AD2610866" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9FA72654-2389-4709-BC70-59EC4349A826" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "E346DCBD-7DEB-464F-B917-8624BE87D646" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C89A24-B07F-43D2-AE83-8F4F03D6C114" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "5697984D-08BA-412F-9BDF-26B658B0ADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "72B97155-E841-4267-9522-A81F8B139A79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "E4187BA1-226E-4976-A642-2F6DAE85538E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "73F22C26-52FC-42A7-B263-0CC7770A8C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "BFB2B338-5E04-4136-939F-749A3B163656" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3D30C02C-91FB-4D29-AF49-7903158E8FEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "2F5CA412-BAAF-4378-8ECD-95A404D4E19B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4C17A088-2CA1-4818-940F-2FEFA881D598" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "C581B7EE-CD08-4D6E-8858-EA8FA631F84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "1DD187E2-2655-407D-87F9-135A9D45F783" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3651863E-81D7-4079-A644-C3D834AF62F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21054.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21054.json index 7cfacc3427d..472ad83d55a 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21054.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21054.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21054", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:41.087", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:41:25.633", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,595 @@ }, "exploitabilityScore": 2.5, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", + "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDE4D65E-8F9B-4810-AED6-95564A97D741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AC42E785-02BF-4F27-B5CF-49572A2DBC8E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6239D93F-CA0E-4120-96A1-FB63276EAEE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "25F19D02-1FFC-48AF-9CB8-063C459E7A4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "CD382E2D-0B51-4908-989A-88E083FC85BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "38B7AB56-AB65-4557-A91C-40CA2FD12351" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "858B0736-2272-4D5A-A77F-47023D21F7D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "61D507C0-086B-4139-A560-126964DFA579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "952CA843-7CF0-4424-BDA4-3F2A93E077B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "39F64BAA-2E49-4919-A940-219391383D5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "57B125ED-D939-4CBC-9E96-BBCF02402A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "07AC19C6-D245-4C3A-90CC-A931A901EA0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FDA1685E-D101-46F6-8857-7F0894E07748" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B6871BC1-19F4-4F0C-88D8-4000590D8D5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4684DF1E-B783-4C81-A3D0-D09AD2610866" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9FA72654-2389-4709-BC70-59EC4349A826" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "E346DCBD-7DEB-464F-B917-8624BE87D646" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C89A24-B07F-43D2-AE83-8F4F03D6C114" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "5697984D-08BA-412F-9BDF-26B658B0ADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "72B97155-E841-4267-9522-A81F8B139A79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "E4187BA1-226E-4976-A642-2F6DAE85538E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "73F22C26-52FC-42A7-B263-0CC7770A8C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "BFB2B338-5E04-4136-939F-749A3B163656" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3D30C02C-91FB-4D29-AF49-7903158E8FEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "2F5CA412-BAAF-4378-8ECD-95A404D4E19B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4C17A088-2CA1-4818-940F-2FEFA881D598" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "C581B7EE-CD08-4D6E-8858-EA8FA631F84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "1DD187E2-2655-407D-87F9-135A9D45F783" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3651863E-81D7-4079-A644-C3D834AF62F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21055.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21055.json index 4c6e2d3974e..432d5e0ba36 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21055.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21055.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21055", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:41.270", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:40:20.293", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,595 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", + "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDE4D65E-8F9B-4810-AED6-95564A97D741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A5E68B7B-BA08-4E8C-B60A-B3836C6986BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AC42E785-02BF-4F27-B5CF-49572A2DBC8E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "0AF1EDA0-2712-4C3C-8D8A-89E154BB63DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6239D93F-CA0E-4120-96A1-FB63276EAEE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "25F19D02-1FFC-48AF-9CB8-063C459E7A4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "CD382E2D-0B51-4908-989A-88E083FC85BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "38B7AB56-AB65-4557-A91C-40CA2FD12351" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "858B0736-2272-4D5A-A77F-47023D21F7D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "61D507C0-086B-4139-A560-126964DFA579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "952CA843-7CF0-4424-BDA4-3F2A93E077B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "39F64BAA-2E49-4919-A940-219391383D5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "57B125ED-D939-4CBC-9E96-BBCF02402A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "07AC19C6-D245-4C3A-90CC-A931A901EA0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FDA1685E-D101-46F6-8857-7F0894E07748" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF85AA7B-E1C7-4946-92B4-E4D545CAACDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B6871BC1-19F4-4F0C-88D8-4000590D8D5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4684DF1E-B783-4C81-A3D0-D09AD2610866" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9FA72654-2389-4709-BC70-59EC4349A826" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "E346DCBD-7DEB-464F-B917-8624BE87D646" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C35B2D31-B8C3-4CC2-9B0A-E4FDC105AC94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C89A24-B07F-43D2-AE83-8F4F03D6C114" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "5697984D-08BA-412F-9BDF-26B658B0ADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "72B97155-E841-4267-9522-A81F8B139A79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "E4187BA1-226E-4976-A642-2F6DAE85538E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "73F22C26-52FC-42A7-B263-0CC7770A8C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "7EB4C4CE-7B3C-4573-87CD-28FC67B777FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "BFB2B338-5E04-4136-939F-749A3B163656" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3D30C02C-91FB-4D29-AF49-7903158E8FEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "2F5CA412-BAAF-4378-8ECD-95A404D4E19B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C908A5B3-C47B-4DA1-A62F-F8FD77FF960D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4C17A088-2CA1-4818-940F-2FEFA881D598" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "C581B7EE-CD08-4D6E-8858-EA8FA631F84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "1DD187E2-2655-407D-87F9-135A9D45F783" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3651863E-81D7-4079-A644-C3D834AF62F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", + "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", + "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", + "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", + "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", + "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", + "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", + "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-217xx/CVE-2025-21712.json b/CVE-2025/CVE-2025-217xx/CVE-2025-21712.json index 453b2c2c19e..cd0be153c8f 100644 --- a/CVE-2025/CVE-2025-217xx/CVE-2025-21712.json +++ b/CVE-2025/CVE-2025-217xx/CVE-2025-21712.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21712", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T02:15:14.863", - "lastModified": "2025-03-07T18:15:47.507", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:07:05.597", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: md/md-bitmap: sincronizar bitmap_get_stats() con el tiempo de vida del mapa de bits Despu\u00e9s de el commit ec6bb299c7c3 (\"md/md-bitmap: agregar 'sync_size' en la estructura md_bitmap_stats\"), se informa el siguiente p\u00e1nico: Vaya: error de protecci\u00f3n general, probablemente para una direcci\u00f3n no can\u00f3nica RIP: 0010:bitmap_get_stats+0x2b/0xa0 Seguimiento de llamadas: md_seq_show+0x2d2/0x5b0 seq_read_iter+0x2b9/0x470 seq_read+0x12f/0x180 proc_reg_read+0x57/0xb0 vfs_read+0xf6/0x380 ksys_read+0x6c/0xf0 La causa principal es que bitmap_get_stats() se puede llamar en cualquier momento si mddev a\u00fan est\u00e1 all\u00ed, incluso si bitmap se destruye o no se inicializa por completo. La deferenciaci\u00f3n de bitmap en este caso puede hacer que el kernel se bloquee. Mientras tanto, el commit anterior comienza a deferenciar bitmap->storage, lo que hace que el problema sea m\u00e1s f\u00e1cil de desencadenar. Solucione el problema protegiendo bitmap_get_stats() con bitmap_info.mutex." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.13", + "versionEndExcluding": "6.1.130", + "matchCriteriaId": "61DF49F7-2C3F-4E19-8AA8-381D3051AC1B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.80", + "matchCriteriaId": "A93F3655-6FAF-43B0-8541-A212998F05B8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.13", + "matchCriteriaId": "2897389C-A8C3-4D69-90F2-E701B3D66373" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.2", + "matchCriteriaId": "6D4116B1-1BFD-4F23-BA84-169CC05FC5A3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/032fa54f486eac5507976e7e31f079a767bc13a8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/237e19519c8ff6949f0ef57c4a0243f5b2b0fa18", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4e9316eee3885bfb311b4759513f2ccf37891c09", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/52848a095b55a302af92f52ca0de5b3112059bb8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8d28d0ddb986f56920ac97ae704cc3340a699a30", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-217xx/CVE-2025-21717.json b/CVE-2025/CVE-2025-217xx/CVE-2025-21717.json index f07d964aad0..de5c67b0083 100644 --- a/CVE-2025/CVE-2025-217xx/CVE-2025-21717.json +++ b/CVE-2025/CVE-2025-217xx/CVE-2025-21717.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21717", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T02:15:15.373", - "lastModified": "2025-02-27T02:15:15.373", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:06:44.987", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5e: agregar cpu_to_node faltante a kvzalloc_node en mlx5e_open_xdpredirect_sq kvzalloc_node no est\u00e1 realizando una verificaci\u00f3n en tiempo de ejecuci\u00f3n en el argumento del nodo (__alloc_pages_node_noprof tiene un VM_BUG_ON, pero se expande a nada en las compilaciones !CONFIG_DEBUG_VM), por lo que realizar cualquier operaci\u00f3n ethtool/netlink que llame a mlx5e_open en una CPU que sea m\u00e1s grande que MAX_NUMNODES desencadena el acceso OOB y el p\u00e1nico (vea el seguimiento a continuaci\u00f3n). Agregue la llamada cpu_to_node faltante para convertir la identificaci\u00f3n de la CPU en identificaci\u00f3n del nodo. [ 165.427394] mlx5_core 0000:5c:00.0 beth1: Enlace activo [ 166.479327] ERROR: no se puede manejar el error de p\u00e1gina para la direcci\u00f3n: 0000000800000010 [ 166.494592] #PF: acceso de lectura del supervisor en modo kernel [ 166.505995] #PF: error_code(0x0000) - p\u00e1gina no presente ... [ 166.816958] Seguimiento de llamadas: [ 166.822380] [ 166.827034] ? __die_body+0x64/0xb0 [ 166.834774] ? page_fault_oops+0x2cd/0x3f0 [ 166.843862] ? exc_page_fault+0x63/0x130 [ 166.852564] ? asm_exc_page_fault+0x22/0x30 [ 166.861843] ? __kvmalloc_node_noprof+0x43/0xd0 [ 166.871897] ? get_partial_node+0x1c/0x320 [ 166.880983] ? deactivate_slab+0x269/0x2b0 [ 166.890069] ___slab_alloc+0x521/0xa90 [ 166.898389] ? __kvmalloc_node_noprof+0x43/0xd0 [ 166.908442] __kmalloc_node_noprof+0x216/0x3f0 [ 166.918302] ? __kvmalloc_node_noprof+0x43/0xd0 [ 166.928354] __kvmalloc_node_noprof+0x43/0xd0 [ 166.938021] mlx5e_open_channels+0x5e2/0xc00 [ 166.947496] mlx5e_open_locked+0x3e/0xf0 [ 166.956201] mlx5e_open+0x23/0x50 [ 166.963551] __dev_open+0x114/0x1c0 [ 166.971292] __dev_change_flags+0xa2/0x1b0 [ 166.980378] dev_change_flags+0x21/0x60 [ 166.988887] do_setlink+0x38d/0xf20 [ 166.996628] ? ep_poll_callback+0x1b9/0x240 [ 167.005910] ? __nla_validate_parse.llvm.10713395753544950386+0x80/0xd70 [ 167.020782] ? __wake_up_sync_key+0x52/0x80 [ 167.030066] ? __mutex_lock+0xff/0x550 [ 167.038382] ? security_capable+0x50/0x90 [ 167.047279] rtnl_setlink+0x1c9/0x210 [ 167.055403] ? ep_poll_callback+0x1b9/0x240 [ 167.064684] ? security_capable+0x50/0x90 [ 167.073579] rtnetlink_rcv_msg+0x2f9/0x310 [ 167.082667] ? rtnetlink_bind+0x30/0x30 [ 167.091173] netlink_rcv_skb+0xb1/0xe0 [ 167.099492] netlink_unicast+0x20f/0x2e0 [ 167.108191] netlink_sendmsg+0x389/0x420 [ 167.116896] __sys_sendto+0x158/0x1c0 [ 167.125024] __x64_sys_sendto+0x22/0x30 [ 167.133534] do_syscall_64+0x63/0x130 [ 167.141657] ? __irq_exit_rcu.llvm.17843942359718260576+0x52/0xd0 [ 167.155181] entry_SYSCALL_64_after_hwframe+0x4b/0x53" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.2", + "matchCriteriaId": "6D4116B1-1BFD-4F23-BA84-169CC05FC5A3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/979284535aaf12a287a2f43d9d5dfcbdc1dc4cac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a275db45b4161d01716559dd7557db9ea0450952", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-217xx/CVE-2025-21719.json b/CVE-2025/CVE-2025-217xx/CVE-2025-21719.json index 297fb6cfc5d..1149da9e8be 100644 --- a/CVE-2025/CVE-2025-217xx/CVE-2025-21719.json +++ b/CVE-2025/CVE-2025-217xx/CVE-2025-21719.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21719", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T02:15:15.580", - "lastModified": "2025-03-13T13:15:49.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:06:58.540", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el n\u00facleo de Linux, se ha resuelto la siguiente vulnerabilidad: ipmr: no llamar a mr_mfc_uses_dev() para entradas no resueltas syzbot descubri\u00f3 que llamar a mr_mfc_uses_dev() para entradas no resueltas provocar\u00eda un bloqueo [1], porque c->mfc_un.res.minvif / c->mfc_un.res.maxvif son alias de \"struct sk_buff_head unresolved\", que contienen dos punteros. Este c\u00f3digo nunca funcion\u00f3, elimin\u00e9moslo. [1] No se puede manejar la solicitud de paginaci\u00f3n del kernel en la direcci\u00f3n virtual ffff5fff2d536613 KASAN: tal vez un acceso a memoria salvaje en el rango [0xfffefff96a9b3098-0xfffefff96a9b309f] M\u00f3dulos vinculados: CPU: 1 UID: 0 PID: 7321 Comm: syz.0.16 No contaminado 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 13/09/2024 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : mr_mfc_uses_dev net/ipv4/ipmr_base.c:290 [en l\u00ednea] pc : mr_table_dump+0x5a4/0x8b0 net/ipv4/ipmr_base.c:334 lr : mr_mfc_uses_dev net/ipv4/ipmr_base.c:289 [en l\u00ednea] lr : mr_table_dump+0x694/0x8b0 net/ipv4/ipmr_base.c:334 Rastreo de llamadas: mr_mfc_uses_dev net/ipv4/ipmr_base.c:290 [en l\u00ednea] (P) mr_table_dump+0x5a4/0x8b0 net/ipv4/ipmr_base.c:334 (P) mr_rtm_dumproute+0x254/0x454 net/ipv4/ipmr_base.c:382 ipmr_rtm_dumproute+0x248/0x4b4 net/ipv4/ipmr.c:2648 rtnl_dump_all+0x2e4/0x4e8 net/core/rtnetlink.c:4327 rtnl_dumpit+0x98/0x1d0 net/core/rtnetlink.c:6791 netlink_dump+0x4f0/0xbc0 net/netlink/af_netlink.c:2317 netlink_recvmsg+0x56c/0xe64 net/netlink/af_netlink.c:1973 sock_recvmsg_nosec net/socket.c:1033 [en l\u00ednea] sock_recvmsg net/socket.c:1055 [en l\u00ednea] sock_read_iter+0x2d8/0x40c net/socket.c:1125 new_sync_read fs/read_write.c:484 [en l\u00ednea] vfs_read+0x740/0x970 fs/read_write.c:565 ksys_read+0x15c/0x26c fs/read_write.c:708" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.291", + "matchCriteriaId": "0621B0C8-6B2C-4585-A573-E22908F29576" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.235", + "matchCriteriaId": "545121FA-DE31-4154-9446-C2000FB4104D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.179", + "matchCriteriaId": "C708062C-4E1B-465F-AE6D-C09C46400875" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.129", + "matchCriteriaId": "2DA5009C-C9B9-4A1D-9B96-78427E8F232C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.76", + "matchCriteriaId": "A6D70701-9CB6-4222-A957-00A419878993" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.13", + "matchCriteriaId": "2897389C-A8C3-4D69-90F2-E701B3D66373" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.2", + "matchCriteriaId": "6D4116B1-1BFD-4F23-BA84-169CC05FC5A3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/15a901361ec3fb1c393f91880e1cbf24ec0a88bd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/26bb7d991f04eeef47dfad23e533834995c26f7a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/53df27fd38f84bd3cd6b004eb4ff3c4903114f1d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/547ef7e8cbb98f966c8719a3e15d4e078aaa9b47", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/57177c5f47a8da852f8d76cf6945cf803f8bb9e5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/71a0fcb68c0a5f3ec912b540cd5d72148e6ee5f1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a099834a51ccf9bbba3de86a251b3433539abfde", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b379b3162ff55a70464c6a934ae9bf0497478a62", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-217xx/CVE-2025-21720.json b/CVE-2025/CVE-2025-217xx/CVE-2025-21720.json index dee977c1425..b717c7b1a4c 100644 --- a/CVE-2025/CVE-2025-217xx/CVE-2025-21720.json +++ b/CVE-2025/CVE-2025-217xx/CVE-2025-21720.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21720", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T02:15:15.683", - "lastModified": "2025-02-27T02:15:15.683", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:06:19.940", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: xfrm: eliminar entrada secpath intermedia en modo de descarga de paquetes Los paquetes manejados por hardware han agregado secpath como una forma de informar al c\u00f3digo central de XFRM que esta ruta ya fue manejada. Ese secpath no es necesario en absoluto despu\u00e9s de que se verifica la pol\u00edtica y se elimina m\u00e1s adelante en la pila. Sin embargo, en el caso de que el reenv\u00edo de IP est\u00e9 habilitado (/proc/sys/net/ipv4/ip_forward), ese secpath no se elimina y los paquetes que ya fueron manejados se reingresan a la ruta TX del controlador con xfrm_offload establecido. En este caso, se observa el siguiente p\u00e1nico del kernel en mlx5: mlx5_core 0000:04:00.0 enp4s0f0np0: Enlace activo mlx5_core 0000:04:00.1 enp4s0f1np1: Enlace activo Inicializando socket de enlace de red XFRM Controlador de dispositivo XFRM IPsec ERROR: desreferencia de puntero NULL del kernel, direcci\u00f3n: 0000000000000000 #PF: obtenci\u00f3n de instrucci\u00f3n de supervisor en modo kernel #PF: error_code(0x0010) - p\u00e1gina no presente PGD 0 P4D 0 Oops: Oops: 0010 [#1] PREEMPT SMP CPU: 0 UID: 0 PID: 0 Comm: swapper/0 No contaminado 6.13.0-rc1-alex #3 Nombre del hardware: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.13.0-1ubuntu1.1 01/04/2014 RIP: 0010:0x0 C\u00f3digo: No se puede acceder a los bytes del c\u00f3digo de operaci\u00f3n en 0xffffffffffffffd6. RSP: 0018:ffffb87380003800 EFLAGS: 00010206 RAX: ffff8df004e02600 RBX: ffffb873800038d8 RCX: 00000000ffff98cf RDX: ffff8df00733e108 RSI: ffff8df00521fb80 RDI: ffff8df001661f00 RBP: ffffb87380003850 R08: ffff8df013980000 R09: 0000000000000010 R10: 0000000000000002 R11: 0000000000000002 R12: ffff8df001661f00 R13: ffff8df00521fb80 R14: ffff8df00733e108 R15: ffff8df011faf04e FS: 000000000000000(0000) GS:ffff8df46b800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 000000080050033 CR2: ffffffffffffffd6 CR3: 0000000106384000 CR4: 0000000000350ef0 Rastreo de llamadas: ? show_regs+0x63/0x70 ? __die_body+0x20/0x60 ? __die+0x2b/0x40 ? page_fault_oops+0x15c/0x550 ? do_user_addr_fault+0x3ed/0x870 ? exc_page_fault+0x7f/0x190 ? asm_exc_page_fault+0x27/0x30 mlx5e_ipsec_handle_tx_skb+0xe7/0x2f0 [mlx5_core] mlx5e_xmit+0x58e/0x1980 [mlx5_core] ? __fib_lookup+0x6a/0xb0 dev_hard_start_xmit+0x82/0x1d0 sch_direct_xmit+0xfe/0x390 __dev_queue_xmit+0x6d8/0xee0 ? __fib_lookup+0x6a/0xb0 ? temporizador_de_adici\u00f3n_interna+0x48/0x70 ? temporizador_mod+0xe2/0x2b0 salida_de_resoluci\u00f3n_vecina+0x115/0x1b0 __neigh_update+0x26a/0xc50 neigh_update+0x14/0x20 proceso_arp+0x2cb/0x8e0 ? __napi_build_skb+0x5e/0x70 arp_rcv+0x11e/0x1c0 ? cadena_de_llamadas_del_notificador_at\u00f3mico+0x3b/0x50 ? manejador_irq_int+0x15/0x20 [mlx5_core] manejador_softirqs+0xb9/0x2f0 ? asm_common_interrupt+0x27/0x40 RIP: 0010:pv_native_safe_halt+0xb/0x10 C\u00f3digo: 09 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 0f 22 0f 1f 84 00 00 00 00 00 90 eb 07 0f 00 2d 7f e9 36 00 fb 40 00 83 ff 07 77 21 89 ff ff 24 fd 88 3d a1 bd 0f 21 f8 RSP: 0018:ffffffffbe603de8 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 000000000000000 RCX: 0000000f92f46680 RDX: 0000000000000037 RSI: 00000000ffffffff RDI: 00000000000518d4 RBP: ffffffffbe603df0 R08: 000000cd42e4dffb R09: ffffffffbe603d70 R10: 0000004d80d62680 R11: 00000000000000001 R12: ffffffffbe60bf40 R13: 0000000000000000 R14: 00000000000000000 R15: ffffffffbe60aff8 ? setup_ghcb+0xe/0x130 common_startup_64+0x13e/0x141 M\u00f3dulos vinculados en: esp4_offload esp4 xfrm_interface xfrm6_tunnel tunnel4 tunnel6 xfrm_user xfrm_algo binf ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.76", + "matchCriteriaId": "A6D70701-9CB6-4222-A957-00A419878993" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.13", + "matchCriteriaId": "2897389C-A8C3-4D69-90F2-E701B3D66373" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.2", + "matchCriteriaId": "6D4116B1-1BFD-4F23-BA84-169CC05FC5A3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/600258d555f0710b9c47fb78d2d80a4aecd608cc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6945701ca1572f81bc9bb46f624b02eabb3eaf3e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/981ad4c882096e7375b8c2181dd4c3ee58ea5bae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c6e1b2cac24b2a4d1dd472071021bf00c26450eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-217xx/CVE-2025-21721.json b/CVE-2025/CVE-2025-217xx/CVE-2025-21721.json index 1b692fa53fa..17cb900f003 100644 --- a/CVE-2025/CVE-2025-217xx/CVE-2025-21721.json +++ b/CVE-2025/CVE-2025-217xx/CVE-2025-21721.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21721", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T02:15:15.787", - "lastModified": "2025-03-13T13:15:50.060", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:06:35.537", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nilfs2: manejar errores que nilfs_prepare_chunk() puede devolver Serie de parches \"nilfs2: soluciona problemas con operaciones de cambio de nombre\". Esta serie corrige los fallos de comprobaci\u00f3n BUG_ON informados por syzbot en torno a las operaciones de cambio de nombre, y un problema de comportamiento menor en el que el mtime de un directorio secundario cambia cuando se le cambia el nombre en lugar de moverlo. Este parche (de 2): Las rutinas de manipulaci\u00f3n de directorios nilfs_set_link() y nilfs_delete_entry() reescriben la entrada del directorio en el folio/p\u00e1gina le\u00eddo previamente por nilfs_find_entry(), por lo que se omite el manejo de errores asumiendo que nilfs_prepare_chunk(), que prepara el b\u00fafer para la reescritura, siempre tendr\u00e1 \u00e9xito para estos. Y si se devuelve un error, activa las comprobaciones BUG_ON() heredadas en cada rutina. Esta suposici\u00f3n es err\u00f3nea, como lo demuestra syzbot: la capa de b\u00fafer llamada por nilfs_prepare_chunk() puede llamar a nilfs_get_block() si es necesario, lo que puede fallar debido a la corrupci\u00f3n de metadatos u otras razones. Esto ha estado ah\u00ed desde siempre, pero las comprobaciones de cordura mejoradas y el manejo de errores pueden haberlo hecho m\u00e1s reproducible en pruebas de fuzzing. Solucione este problema agregando rutas de error faltantes en nilfs_set_link(), nilfs_delete_entry() y su llamador nilfs_rename()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-617" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.30", + "versionEndExcluding": "5.4.291", + "matchCriteriaId": "CEBF7E6F-EAC4-4FE8-8F7F-33CD752853C3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.235", + "matchCriteriaId": "545121FA-DE31-4154-9446-C2000FB4104D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.179", + "matchCriteriaId": "C708062C-4E1B-465F-AE6D-C09C46400875" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.131", + "matchCriteriaId": "BA9C2DE3-D37C-46C6-8DCD-2EE509456E0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.80", + "matchCriteriaId": "A93F3655-6FAF-43B0-8541-A212998F05B8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.13", + "matchCriteriaId": "2897389C-A8C3-4D69-90F2-E701B3D66373" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.2", + "matchCriteriaId": "6D4116B1-1BFD-4F23-BA84-169CC05FC5A3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1ee2d454baa361d2964e3e2f2cca9ee3f769d93c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/481136234dfe96c7f92770829bec6111c7c5f5dd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/607dc724b162f4452dc768865e578c1a509a1c8c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7891ac3b0a5c56f7148af507306308ab841cdc31", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b38c6c260c2415c7f0968871305e7a093daabb4c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eddd3176b8c4c83a46ab974574cda7c3dfe09388", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ee70999a988b8abc3490609142f50ebaa8344432", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f70bd2d8ca454e0ed78970f72147ca321dbaa015", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-217xx/CVE-2025-21724.json b/CVE-2025/CVE-2025-217xx/CVE-2025-21724.json index 7bfb0efab3a..c07323da9b8 100644 --- a/CVE-2025/CVE-2025-217xx/CVE-2025-21724.json +++ b/CVE-2025/CVE-2025-217xx/CVE-2025-21724.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21724", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T02:15:16.113", - "lastModified": "2025-02-27T02:15:16.113", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:06:00.863", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iommufd/iova_bitmap: Se soluciona el problema de desplazamiento fuera de los l\u00edmites en iova_bitmap_offset_to_index() Se soluciona un problema de desplazamiento fuera de los l\u00edmites de UBSAN en iova_bitmap_offset_to_index() donde desplazar la constante \"1\" (de tipo int) por bitmap->mapped.pgshift (un valor unsigned long) podr\u00eda resultar en un comportamiento indefinido. La constante \"1\" tiene como valor predeterminado un \"int\" de 32 bits, y cuando \"pgshift\" supera los 31 (por ejemplo, pgshift = 63) la operaci\u00f3n de desplazamiento se desborda, ya que el resultado no se puede representar en un tipo de 32 bits. Para resolver esto, la constante se actualiza a \"1UL\", promovi\u00e9ndola a un tipo unsigned long para que coincida con el tipo del operando." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.129", + "matchCriteriaId": "23CFC977-3B4F-4678-B36A-9517EF29ADEE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.76", + "matchCriteriaId": "A6D70701-9CB6-4222-A957-00A419878993" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.13", + "matchCriteriaId": "2897389C-A8C3-4D69-90F2-E701B3D66373" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.2", + "matchCriteriaId": "6D4116B1-1BFD-4F23-BA84-169CC05FC5A3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/38ac76fc06bc6826a3e4b12a98efbe98432380a9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/44d9c94b7a3f29a3e07c4753603a35e9b28842a3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b1f8453b8ff1ab79a03820ef608256c499769cb6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d5d33f01b86af44b23eea61ee309e4ef22c0cdfe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e24c1551059268b37f6f40639883eafb281b8b9c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-217xx/CVE-2025-21725.json b/CVE-2025/CVE-2025-217xx/CVE-2025-21725.json index dcc99f31ac0..cac5b90f2f7 100644 --- a/CVE-2025/CVE-2025-217xx/CVE-2025-21725.json +++ b/CVE-2025/CVE-2025-217xx/CVE-2025-21725.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21725", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T02:15:16.220", - "lastModified": "2025-02-27T02:15:16.220", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:06:08.747", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: smb: cliente: corregir oops debido a una velocidad de enlace no establecida No se garantiza que el servidor siempre establezca NETWORK_INTERFACE_INFO::LinkSpeed, por lo que el cliente debe controlar los valores y luego evitar que ocurran oops como el siguiente: Oops: error de divisi\u00f3n: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 0 UID: 0 PID: 1323 Comm: cat No contaminado 6.13.0-rc7 #2 Nombre del hardware: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-3.fc41 04/01/2014 RIP: 0010:cifs_debug_data_proc_show+0xa45/0x1460 [cifs] C\u00f3digo: 00 00 48 89 df e8 3b cd 1b c1 41 f6 44 24 2c 04 0f 84 50 01 00 00 48 89 ef e8 e7 d0 1b c1 49 8b 44 24 18 31 d2 49 8d 7c 24 28 <48> f7 74 24 18 48 89 c3 e8 6e cf 1b c1 41 8b 6c 24 28 49 8d 7c 24 RSP: 0018:ffffc90001817be0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88811230022c RCX: ffffffffc041bd99 RDX: 0000000000000000 RSI: 0000000000000567 RDI: ffff888112300228 RBP: ffff888112300218 R08: fffff52000302f5f R09: ffffed1022fa58ac R10: ffff888117d2c566 R11: 00000000ffffff R12: ffff888112300200 R13: 000000012a15343f R14: 000000000000001 R15: ffff888113f2db58 FS: 00007fe27119e740(0000) GS:ffff888148600000(0000) knlGS:00000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe2633c5000 CR3: 0000000124da0000 CR4: 0000000000750ef0 PKRU: 55555554 Seguimiento de llamadas: ? __die_body.cold+0x19/0x27 ? die+0x2e/0x50 ? do_trap+0x159/0x1b0 ? cifs_debug_data_proc_show+0xa45/0x1460 [cifs] ? do_error_trap+0x90/0x130 ? cifs_debug_data_proc_show+0xa45/0x1460 [cifs] ? exc_divide_error+0x39/0x50 ? cifs_debug_data_proc_show+0xa45/0x1460 [cifs] ? asm_exc_divide_error+0x1a/0x20 ? cifs_debug_data_proc_show+0xa39/0x1460 [cifs] ? cifs_debug_data_proc_show+0xa45/0x1460 [cifs] ? seq_read_iter+0x42e/0x790 seq_read_iter+0x19a/0x790 proc_reg_read_iter+0xbe/0x110 ? __pfx_proc_reg_read_iter+0x10/0x10 vfs_read+0x469/0x570 ? do_user_addr_fault+0x398/0x760 ? __pfx_vfs_read+0x10/0x10 ? find_held_lock+0x8a/0xa0 ? __pfx_lock_release+0x10/0x10 ksys_read+0xd3/0x170 ? __pfx_ksys_read+0x10/0x10 ? __rcu_read_unlock+0x50/0x270 ? mark_held_locks+0x1a/0x90 do_syscall_64+0xbb/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe271288911 C\u00f3digo: 00 48 8b 15 01 25 10 00 f7 d8 64 89 02 b8 ff ff ff ff eb bd e8 20 ad 01 00 f3 0f 1e fa 80 3d b5 a7 10 00 00 74 13 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 4f c3 66 0f 1f 44 00 00 55 48 89 e5 48 83 ec RSP: 002b:00007ffe87c079d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fe271288911 RDX: 0000000000040000 RSI: 00007fe2633c6000 RDI: 0000000000000003 RBP: 00007ffe87c07a00 R08: 0000000000000000 R09: 00007fe2713e6380 R10: 00000000000000022 R11: 0000000000000246 R12: 0000000000040000 R13: 00007fe2633c6000 R14: 0000000000000003 R15: 0000000000000000 Solucione esto configurando cifs_server_iface::speed en un valor razonable (1 Gbps) de manera predeterminada cuando la velocidad del enlace no est\u00e1 configurada." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.65", + "versionEndExcluding": "6.1.129", + "matchCriteriaId": "F8837718-3D0A-4219-9E72-A6D206F288EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.4", + "versionEndExcluding": "6.6.76", + "matchCriteriaId": "D1551D06-9A6E-4921-BB63-73919A44CE01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.13", + "matchCriteriaId": "2897389C-A8C3-4D69-90F2-E701B3D66373" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.2", + "matchCriteriaId": "6D4116B1-1BFD-4F23-BA84-169CC05FC5A3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/208e102a2fca44e40a6c3f7b9e2609cfd17a15aa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3f901c35e1a1b3ed1b528a17ffdb941aa0294458", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/699179dfc8d7da457b152ca5d18ae45f9ed9beaa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ad3b49fbdb156aa8ee2026ba590642c9b5a410f2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/be7a6a77669588bfa5022a470989702bbbb11e7f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-217xx/CVE-2025-21728.json b/CVE-2025/CVE-2025-217xx/CVE-2025-21728.json index c65c5887de2..e88fce34a99 100644 --- a/CVE-2025/CVE-2025-217xx/CVE-2025-21728.json +++ b/CVE-2025/CVE-2025-217xx/CVE-2025-21728.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21728", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T02:15:16.530", - "lastModified": "2025-03-13T13:15:50.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:05:52.440", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,171 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf: Env\u00eda se\u00f1ales de forma asincr\u00f3nica si los programas BPF !preemptible pueden ejecutarse en todo tipo de contextos y cuando un programa que se ejecuta en un contexto no preemptible utiliza la funci\u00f3n kfunc bpf_send_signal(), causar\u00e1 problemas porque esta funci\u00f3n kfunc puede suspenderse. Cambie `irqs_disabled()` a `!preemptible()`." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.33", + "versionEndExcluding": "5.4.291", + "matchCriteriaId": "E6E00A4E-6D21-4396-A94E-5D3080BBB3C4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5.18", + "versionEndExcluding": "5.6", + "matchCriteriaId": "654843C2-9EB0-4353-9CA1-F34C30F263B9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6.1", + "versionEndExcluding": "5.10.235", + "matchCriteriaId": "8B58932D-19CF-4F0B-BAB4-565ACFC0C31B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.179", + "matchCriteriaId": "C708062C-4E1B-465F-AE6D-C09C46400875" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.129", + "matchCriteriaId": "2DA5009C-C9B9-4A1D-9B96-78427E8F232C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.76", + "matchCriteriaId": "A6D70701-9CB6-4222-A957-00A419878993" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.13", + "matchCriteriaId": "2897389C-A8C3-4D69-90F2-E701B3D66373" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.2", + "matchCriteriaId": "6D4116B1-1BFD-4F23-BA84-169CC05FC5A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.6:-:*:*:*:*:*:*", + "matchCriteriaId": "A92F7A0E-C302-4FEA-9EF3-1A3D5CF3AD54" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/092fc76b7ab4163e008f9cde596a58dad2108260", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/78b97783496b454435639937db3303e900a24d3f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/87c544108b612512b254c8f79aa5c0a8546e2cc4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/be42a09fe898635b0093c0c8dac1bfabe225c240", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce51eab2070e295d298f42a2f1db269cd1b56d55", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e306eaaa3d78b462db5f5b11e0171f9d2b6ca3f4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eeef8e65041a031bd8a747a392c14b76a123a12c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/feba1308bc5e8e04cee751d39fae8a9b407a9034", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-217xx/CVE-2025-21730.json b/CVE-2025/CVE-2025-217xx/CVE-2025-21730.json index b80c5c39be0..dcb8db2302b 100644 --- a/CVE-2025/CVE-2025-217xx/CVE-2025-21730.json +++ b/CVE-2025/CVE-2025-217xx/CVE-2025-21730.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21730", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-27T02:15:16.733", - "lastModified": "2025-02-27T02:15:16.733", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:05:24.863", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,82 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: rtw89: evitar inicializar la lista mgnt_entry dos veces cuando WoWLAN falla Si WoWLAN falla en el flujo de reanudaci\u00f3n, rtw89_ops_add_interface() se activa sin eliminar la interfaz primero. Luego, la lista mgnt_entry se inicializa nuevamente, lo que hace que la comprobaci\u00f3n list_empty() en rtw89_chanctx_ops_assign_vif() sea in\u00fatil y list_add_tail() nuevamente. Por lo tanto, hemos agregado una comprobaci\u00f3n para evitar la doble adici\u00f3n de la lista. rtw89_8852ce 0000:01:00.0: no se pudo comprobar el estado de wow deshabilitado rtw89_8852ce 0000:01:00.0: wow: no se pudo comprobar si el firmware est\u00e1 listo para deshabilitar rtw89_8852ce 0000:01:00.0: wow: no se pudo cambiar al firmware normal rtw89_8852ce 0000:01:00.0: no se pudo deshabilitar wow rtw89_8852ce 0000:01:00.0: no se pudo reanudar para wow -110 rtw89_8852ce 0000:01:00.0: La MAC ya se ha encendido i2c_hid_acpi i2c-ILTK0001:00: PM: acpi_subsys_resume+0x0/0x60 devuelto 0 despu\u00e9s de 284705 corrupci\u00f3n de usecs list_add. prev->next deber\u00eda ser next (ffff9d9719d82228), pero era ffff9d9719f96030. (prev=ffff9d9719f96030). ------------[ cortar aqu\u00ed ]------------ \u00a1ERROR del kernel en lib/list_debug.c:34! c\u00f3digo de operaci\u00f3n no v\u00e1lido: 0000 [#1] PREEMPT SMP NOPTI CPU: 2 PID: 6918 Comm: kworker/u8:19 Contaminado: GUO Nombre del hardware: Google Anraggar/Anraggar, BIOS Google_Anraggar.15217.514.0 25/03/2024 Cola de trabajo: events_unbound async_run_entry_fn RIP: 0010:__list_add_valid_or_report+0x9f/0xb0 C\u00f3digo: e8 56 89 ff ff 0f 0b 48 c7 c7 3e fc e0 96 48 89 c6 e8 45 89 ff ... RSP: 0018:ffffa51b42bbbaf0 EFLAGS: 00010246 RAX: 00000000000000075 RBX: ffff9d9719d82ab0 RCX: 13acb86e047a4400 RDX: 3ffffffffffffffff RSI: 000000000000000 RDI: 00000000ffffdfff RBP: ffffa51b42bbbb28 R08: ffffffff9768e250 R09: 0000000000001fff R10: ffffffff9765e250 R11: 0000000000005ffd R12: ffff9d9719f95c40 R13: ffff9d9719f95be8 R14: ffff9d97081bfd78 R15: ffff9d9719d82060 FS: 0000000000000000(0000) GS:ffff9d9a6fb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007e7d029a4060 CR3: 0000000345e38000 CR4: 0000000000750ee0 PKRU: 55555554 Seguimiento de llamadas: __die_body+0x68/0xb0 ? die+0xaa/0xd0 ? do_trap+0x9f/0x170 ? __list_add_valid_or_report+0x9f/0xb0 ? __list_add_valid_or_report+0x9f/0xb0 ? handle_invalid_op+0x69/0x90 ? __list_add_valid_or_report+0x9f/0xb0 ? exc_invalid_op+0x3c/0x50 ? asm_exc_invalid_op+0x16/0x20 ? __list_add_valid_or_report+0x9f/0xb0 rtw89_chanctx_ops_assign_vif+0x1f9/0x210 [rtw89_core cbb375c44bf28564ce479002bff66617a25d9ac1] ? __mutex_unlock_slowpath+0xa0/0xf0 rtw89_ops_assign_vif_chanctx+0x4b/0x90 [rtw89_core cbb375c44bf28564ce479002bff66617a25d9ac1] drv_assign_vif_chanctx+0xa7/0x1f0 [mac80211 6efaad16237edaaea0868b132d4f93ecf918a8b6] ieee80211_reconfig+0x9cb/0x17b0 [mac80211 6efaad16237edaaea0868b132d4f93ecf918a8b6] ? __pfx_wiphy_resume+0x10/0x10 [cfg80211 572d03acaaa933fe38251be7fce3b3675284b8ed] ? dev_printk_emit+0x51/0x70 ? _dev_info+0x6e/0x90 wiphy_resume+0x89/0x180 [cfg80211 572d03acaaa933fe38251be7fce3b3675284b8ed] ? __pfx_wiphy_resume+0x10/0x10 [cfg80211 572d03acaaa933fe38251be7fce3b3675284b8ed] dpm_run_callback+0x37/0x1e0 device_resume+0x26d/0x4b0 ? __pfx_dpm_watchdog_handler+0x10/0x10 async_resume+0x1d/0x30 async_run_entry_fn+0x29/0xd0 worker_thread+0x397/0x970 kthread+0xed/0x110 ? __pfx_worker_thread+0x10/0x10 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x38/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.2", + "matchCriteriaId": "6D4116B1-1BFD-4F23-BA84-169CC05FC5A3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2f7667675df1b40b73ecc53b4b8c3189b1e5f2c1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4ed5bf49819757303e657f3900725febf2f3926f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7fc295fdd3992a9a07d12fd3f2e84dface23aedc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-406xx/CVE-2025-40656.json b/CVE-2025/CVE-2025-406xx/CVE-2025-40656.json index ac9b23661e0..544de13c1c0 100644 --- a/CVE-2025/CVE-2025-406xx/CVE-2025-40656.json +++ b/CVE-2025/CVE-2025-406xx/CVE-2025-40656.json @@ -2,8 +2,8 @@ "id": "CVE-2025-40656", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2025-06-10T10:15:27.843", - "lastModified": "2025-06-12T16:06:39.330", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-23T13:58:48.240", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -73,10 +95,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:acc:dm_corporative_cms:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2025.01", + "matchCriteriaId": "8424AC64-05AA-48EF-B312-CABE5A4437D0" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-dm-corporative-cms-dmacroweb", - "source": "cve-coordination@incibe.es" + "source": "cve-coordination@incibe.es", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-429xx/CVE-2025-42911.json b/CVE-2025/CVE-2025-429xx/CVE-2025-42911.json index 3db6e05572e..1a9360c0e4d 100644 --- a/CVE-2025/CVE-2025-429xx/CVE-2025-42911.json +++ b/CVE-2025/CVE-2025-429xx/CVE-2025-42911.json @@ -2,8 +2,8 @@ "id": "CVE-2025-42911", "sourceIdentifier": "cna@sap.com", "published": "2025-09-09T02:15:38.737", - "lastModified": "2025-09-09T16:28:43.660", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:45:48.857", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "cna@sap.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.1, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -47,14 +67,107 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*", + "matchCriteriaId": "85616273-040E-49CB-8EB6-D2D4D7B603E5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*", + "matchCriteriaId": "C5F2C3A9-DCC0-4FF1-8E68-9EA150E209F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*", + "matchCriteriaId": "6F774A45-2A9F-4873-A5DC-766D030C8CCD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*", + "matchCriteriaId": "D3A0A2D6-9259-4A35-A236-F4BEE986C1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*", + "matchCriteriaId": "49C3A8E5-FA6A-4EF3-BF50-FD4E1576024F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*", + "matchCriteriaId": "ABA8AB4E-3FE6-46A8-847E-660C5DF6CE71" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*", + "matchCriteriaId": "6DA4A6F0-C0F1-42CB-8BBD-7198064733EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*", + "matchCriteriaId": "8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*", + "matchCriteriaId": "86086D00-10BF-4C55-8D87-82CCBE468153" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*", + "matchCriteriaId": "2F25246A-D9E5-4F0D-B91A-478D4E5570DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*", + "matchCriteriaId": "0218695F-C4AD-46BF-B176-F10C644A9C2D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*", + "matchCriteriaId": "FC9E7C3E-1005-450A-9198-E014C1BAADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*", + "matchCriteriaId": "3A177AB1-CC85-46EF-91DF-462096608C9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*", + "matchCriteriaId": "F7591F81-708C-4285-9BB2-F2B4BDB9759B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:816:*:*:*:*:*:*:*", + "matchCriteriaId": "EF7825FC-2F0F-4096-BE41-67B4DCC4F7DE" + } + ] + } + ] + } + ], "references": [ { "url": "https://me.sap.com/notes/3627644", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://url.sap/sapsecuritypatchday", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-429xx/CVE-2025-42918.json b/CVE-2025/CVE-2025-429xx/CVE-2025-42918.json index 48ede1cdac6..c1df85a3dde 100644 --- a/CVE-2025/CVE-2025-429xx/CVE-2025-42918.json +++ b/CVE-2025/CVE-2025-429xx/CVE-2025-42918.json @@ -2,8 +2,8 @@ "id": "CVE-2025-42918", "sourceIdentifier": "cna@sap.com", "published": "2025-09-09T02:15:40.110", - "lastModified": "2025-09-09T16:28:43.660", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:44:38.700", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,107 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*", + "matchCriteriaId": "85616273-040E-49CB-8EB6-D2D4D7B603E5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*", + "matchCriteriaId": "C5F2C3A9-DCC0-4FF1-8E68-9EA150E209F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*", + "matchCriteriaId": "6F774A45-2A9F-4873-A5DC-766D030C8CCD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*", + "matchCriteriaId": "D3A0A2D6-9259-4A35-A236-F4BEE986C1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*", + "matchCriteriaId": "49C3A8E5-FA6A-4EF3-BF50-FD4E1576024F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*", + "matchCriteriaId": "ABA8AB4E-3FE6-46A8-847E-660C5DF6CE71" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*", + "matchCriteriaId": "6DA4A6F0-C0F1-42CB-8BBD-7198064733EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*", + "matchCriteriaId": "8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*", + "matchCriteriaId": "86086D00-10BF-4C55-8D87-82CCBE468153" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*", + "matchCriteriaId": "2F25246A-D9E5-4F0D-B91A-478D4E5570DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*", + "matchCriteriaId": "0218695F-C4AD-46BF-B176-F10C644A9C2D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*", + "matchCriteriaId": "FC9E7C3E-1005-450A-9198-E014C1BAADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*", + "matchCriteriaId": "3A177AB1-CC85-46EF-91DF-462096608C9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*", + "matchCriteriaId": "F7591F81-708C-4285-9BB2-F2B4BDB9759B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:816:*:*:*:*:*:*:*", + "matchCriteriaId": "EF7825FC-2F0F-4096-BE41-67B4DCC4F7DE" + } + ] + } + ] + } + ], "references": [ { "url": "https://me.sap.com/notes/3623504", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://url.sap/sapsecuritypatchday", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-429xx/CVE-2025-42926.json b/CVE-2025/CVE-2025-429xx/CVE-2025-42926.json index 336ad4c9046..c28606b128b 100644 --- a/CVE-2025/CVE-2025-429xx/CVE-2025-42926.json +++ b/CVE-2025/CVE-2025-429xx/CVE-2025-42926.json @@ -2,8 +2,8 @@ "id": "CVE-2025-42926", "sourceIdentifier": "cna@sap.com", "published": "2025-09-09T02:15:41.050", - "lastModified": "2025-09-09T16:28:43.660", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:43:32.437", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,6 +15,26 @@ "cvssMetricV31": [ { "source": "cna@sap.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", @@ -47,14 +67,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*", + "matchCriteriaId": "9C506445-3787-4BFF-A98B-7502A0F7CF80" + } + ] + } + ] + } + ], "references": [ { "url": "https://me.sap.com/notes/3619465", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://url.sap/sapsecuritypatchday", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-429xx/CVE-2025-42936.json b/CVE-2025/CVE-2025-429xx/CVE-2025-42936.json index 55744c274ab..dcb488c0871 100644 --- a/CVE-2025/CVE-2025-429xx/CVE-2025-42936.json +++ b/CVE-2025/CVE-2025-429xx/CVE-2025-42936.json @@ -2,8 +2,8 @@ "id": "CVE-2025-42936", "sourceIdentifier": "cna@sap.com", "published": "2025-08-12T03:15:26.477", - "lastModified": "2025-08-12T14:25:33.177", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:41:58.860", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,107 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*", + "matchCriteriaId": "85616273-040E-49CB-8EB6-D2D4D7B603E5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*", + "matchCriteriaId": "C5F2C3A9-DCC0-4FF1-8E68-9EA150E209F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*", + "matchCriteriaId": "6F774A45-2A9F-4873-A5DC-766D030C8CCD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*", + "matchCriteriaId": "D3A0A2D6-9259-4A35-A236-F4BEE986C1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*", + "matchCriteriaId": "49C3A8E5-FA6A-4EF3-BF50-FD4E1576024F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*", + "matchCriteriaId": "ABA8AB4E-3FE6-46A8-847E-660C5DF6CE71" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*", + "matchCriteriaId": "6DA4A6F0-C0F1-42CB-8BBD-7198064733EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*", + "matchCriteriaId": "8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*", + "matchCriteriaId": "86086D00-10BF-4C55-8D87-82CCBE468153" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*", + "matchCriteriaId": "2F25246A-D9E5-4F0D-B91A-478D4E5570DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*", + "matchCriteriaId": "0218695F-C4AD-46BF-B176-F10C644A9C2D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*", + "matchCriteriaId": "FC9E7C3E-1005-450A-9198-E014C1BAADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*", + "matchCriteriaId": "3A177AB1-CC85-46EF-91DF-462096608C9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*", + "matchCriteriaId": "F7591F81-708C-4285-9BB2-F2B4BDB9759B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:816:*:*:*:*:*:*:*", + "matchCriteriaId": "EF7825FC-2F0F-4096-BE41-67B4DCC4F7DE" + } + ] + } + ] + } + ], "references": [ { "url": "https://me.sap.com/notes/3602656", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://url.sap/sapsecuritypatchday", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55096.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55096.json index 3a345ea8ef6..4e18f3c42dc 100644 --- a/CVE-2025/CVE-2025-550xx/CVE-2025-55096.json +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55096.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55096", "sourceIdentifier": "emo@eclipse.org", "published": "2025-10-17T06:15:35.630", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:32:46.373", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.9, + "impactScore": 5.2 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:eclipse:threadx_usbx:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.4.3.202503", + "matchCriteriaId": "B8C9E3B8-8960-4282-AF07-5D2F56DBCD5F" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-8m9v-jvjp-gmxq", - "source": "emo@eclipse.org" + "source": "emo@eclipse.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55097.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55097.json index f556deeedd0..cb8bc9936d6 100644 --- a/CVE-2025/CVE-2025-550xx/CVE-2025-55097.json +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55097.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55097", "sourceIdentifier": "emo@eclipse.org", "published": "2025-10-17T06:15:35.813", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:32:54.340", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.9, + "impactScore": 5.2 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:eclipse:threadx_usbx:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.4.3.202503", + "matchCriteriaId": "B8C9E3B8-8960-4282-AF07-5D2F56DBCD5F" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-r6h5-fmhc-v3j7", - "source": "emo@eclipse.org" + "source": "emo@eclipse.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55098.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55098.json index c63748f371b..db36590461e 100644 --- a/CVE-2025/CVE-2025-550xx/CVE-2025-55098.json +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55098.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55098", "sourceIdentifier": "emo@eclipse.org", "published": "2025-10-17T06:15:35.950", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:33:08.293", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.9, + "impactScore": 5.2 + } ] }, "weaknesses": [ @@ -69,10 +91,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:eclipse:threadx_usbx:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.4.3.202503", + "matchCriteriaId": "B8C9E3B8-8960-4282-AF07-5D2F56DBCD5F" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-4jc2-x5hv-46fq", - "source": "emo@eclipse.org" + "source": "emo@eclipse.org", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55099.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55099.json index 8d184b8c9d9..ec49c09a1fe 100644 --- a/CVE-2025/CVE-2025-550xx/CVE-2025-55099.json +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55099.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55099", "sourceIdentifier": "emo@eclipse.org", "published": "2025-10-17T06:15:36.100", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:33:01.977", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.9, + "impactScore": 5.2 + } ] }, "weaknesses": [ @@ -69,10 +91,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:eclipse:threadx_usbx:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.4.3.202503", + "matchCriteriaId": "B8C9E3B8-8960-4282-AF07-5D2F56DBCD5F" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-93mv-fcpr-9488", - "source": "emo@eclipse.org" + "source": "emo@eclipse.org", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-551xx/CVE-2025-55100.json b/CVE-2025/CVE-2025-551xx/CVE-2025-55100.json index 64f0f6bc743..e0b6ba7c041 100644 --- a/CVE-2025/CVE-2025-551xx/CVE-2025-55100.json +++ b/CVE-2025/CVE-2025-551xx/CVE-2025-55100.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55100", "sourceIdentifier": "emo@eclipse.org", "published": "2025-10-17T06:15:36.247", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:33:27.570", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.2 + } ] }, "weaknesses": [ @@ -69,10 +91,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:eclipse:threadx_usbx:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.4.3.202503", + "matchCriteriaId": "B8C9E3B8-8960-4282-AF07-5D2F56DBCD5F" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-j253-w29r-9m48", - "source": "emo@eclipse.org" + "source": "emo@eclipse.org", + "tags": [ + "Vendor Advisory", + "Exploit" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-571xx/CVE-2025-57164.json b/CVE-2025/CVE-2025-571xx/CVE-2025-57164.json index 63debcc532b..48f8e56c104 100644 --- a/CVE-2025/CVE-2025-571xx/CVE-2025-57164.json +++ b/CVE-2025/CVE-2025-571xx/CVE-2025-57164.json @@ -2,8 +2,8 @@ "id": "CVE-2025-57164", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-17T18:15:37.013", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:33:49.467", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:flowiseai:flowise:3.0.5:*:*:*:*:*:*:*", + "matchCriteriaId": "D5D151AD-7484-4BE3-B42F-7D0279B5E886" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/FlowiseAI/Flowise", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://github.com/FlowiseAI/Flowise/blob/main/packages/components/nodes/vectorstores/Supabase/Supabase.ts#L237", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7944-7c6r-55vv", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-594xx/CVE-2025-59438.json b/CVE-2025/CVE-2025-594xx/CVE-2025-59438.json index cb3f6ae6abc..e9fc89e62b3 100644 --- a/CVE-2025/CVE-2025-594xx/CVE-2025-59438.json +++ b/CVE-2025/CVE-2025-594xx/CVE-2025-59438.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59438", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T15:15:39.103", - "lastModified": "2025-10-21T19:31:25.450", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:35:35.187", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*", + "versionEndExcluding": "3.6.5", + "matchCriteriaId": "D9DA7861-39B5-40B3-BF4F-6A79ED188844" + } + ] + } + ] + } + ], "references": [ { "url": "https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-invalid-padding-error/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59536.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59536.json index 0b019a0223f..6d8a2cd2278 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59536.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59536.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59536", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-03T07:15:44.550", - "lastModified": "2025-10-06T14:57:05.000", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-23T12:46:37.910", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:anthropic:claude_code:*:*:*:*:*:node.js:*:*", + "versionEndExcluding": "1.0.111", + "matchCriteriaId": "F3228CCD-772D-459F-ACFD-0230FD8AB721" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/anthropics/claude-code/security/advisories/GHSA-4fgq-fpq9-mr3g", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60337.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60337.json index ac68363b840..bf9f6e1dd48 100644 --- a/CVE-2025/CVE-2025-603xx/CVE-2025-60337.json +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60337.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60337", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-22T18:15:34.733", - "lastModified": "2025-10-22T21:12:32.330", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:30:45.210", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,11 +11,79 @@ "value": "Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac6_firmware:15.03.06.50:*:*:*:*:*:*:*", + "matchCriteriaId": "ED890D2E-3860-4E6E-A1D4-FC0031430884" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac6:2.0:*:*:*:*:*:*:*", + "matchCriteriaId": "E382AD7E-1450-40FC-AE9D-698B491805F0" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/SetSpeedWan.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60338.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60338.json index ed6ed47db0e..0bd74a5792e 100644 --- a/CVE-2025/CVE-2025-603xx/CVE-2025-60338.json +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60338.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60338", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-22T16:15:45.157", - "lastModified": "2025-10-22T21:12:32.330", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:30:55.257", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,11 +11,79 @@ "value": "Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac6_firmware:15.03.06.50:*:*:*:*:*:*:*", + "matchCriteriaId": "ED890D2E-3860-4E6E-A1D4-FC0031430884" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac6:2.0:*:*:*:*:*:*:*", + "matchCriteriaId": "E382AD7E-1450-40FC-AE9D-698B491805F0" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/fromDhcpListClient/fromDhcpListClient.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60341.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60341.json index 0b43487d5aa..e0106db9325 100644 --- a/CVE-2025/CVE-2025-603xx/CVE-2025-60341.json +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60341.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60341", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-22T18:15:35.140", - "lastModified": "2025-10-22T21:12:32.330", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:30:34.360", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,11 +11,79 @@ "value": "Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac6_firmware:15.03.06.50:*:*:*:*:*:*:*", + "matchCriteriaId": "ED890D2E-3860-4E6E-A1D4-FC0031430884" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac6:2.0:*:*:*:*:*:*:*", + "matchCriteriaId": "E382AD7E-1450-40FC-AE9D-698B491805F0" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/fast_setting_wifi_set/fast_setting_wifi_set.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60342.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60342.json index b5603d68330..dc7c895ff8b 100644 --- a/CVE-2025/CVE-2025-603xx/CVE-2025-60342.json +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60342.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60342", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-22T18:15:35.270", - "lastModified": "2025-10-22T21:12:32.330", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:30:02.370", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,11 +11,79 @@ "value": "Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac6_firmware:15.03.06.50:*:*:*:*:*:*:*", + "matchCriteriaId": "ED890D2E-3860-4E6E-A1D4-FC0031430884" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac6:2.0:*:*:*:*:*:*:*", + "matchCriteriaId": "E382AD7E-1450-40FC-AE9D-698B491805F0" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/addressNat/addressNat.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60358.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60358.json index 61f151f42f3..8ed4746539d 100644 --- a/CVE-2025/CVE-2025-603xx/CVE-2025-60358.json +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60358.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60358", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-16T20:15:33.997", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:31:42.327", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "5.9.8", + "matchCriteriaId": "DD7ED9A8-17F8-4FD1-8D7F-EBBB728A07CD" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/radareorg/radare2/pull/24224", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60359.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60359.json index ee7916cd245..59440ff406e 100644 --- a/CVE-2025/CVE-2025-603xx/CVE-2025-60359.json +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60359.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60359", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-17T14:15:46.953", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:34:03.940", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "5.9.8", + "matchCriteriaId": "DD7ED9A8-17F8-4FD1-8D7F-EBBB728A07CD" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/radareorg/radare2/pull/24215", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60360.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60360.json index 24527aaa125..53f61ac5a5d 100644 --- a/CVE-2025/CVE-2025-603xx/CVE-2025-60360.json +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60360.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60360", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-17T14:15:47.070", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:34:14.797", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "5.9.8", + "matchCriteriaId": "DD7ED9A8-17F8-4FD1-8D7F-EBBB728A07CD" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/radareorg/radare2/pull/24245", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60361.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60361.json index 63657aa3f2d..f514a2d77a4 100644 --- a/CVE-2025/CVE-2025-603xx/CVE-2025-60361.json +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60361.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60361", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-17T15:15:39.503", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:35:50.440", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "5.9.8", + "matchCriteriaId": "DD7ED9A8-17F8-4FD1-8D7F-EBBB728A07CD" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/radareorg/radare2/pull/24312", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61181.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61181.json index 5b05b04d9dc..3fc7fd8d8a0 100644 --- a/CVE-2025/CVE-2025-611xx/CVE-2025-61181.json +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61181.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61181", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T16:15:38.547", - "lastModified": "2025-10-21T21:15:39.803", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:35:14.943", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:daicuo:daicuo:1.3.13:*:*:*:*:*:*:*", + "matchCriteriaId": "955C183A-BCCB-426E-9E29-429EA6B48DD6" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/jayfoxaa/yuhang-Zhou/blob/main/upload/readme.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61194.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61194.json index c19ffaa9572..d6d42560ff4 100644 --- a/CVE-2025/CVE-2025-611xx/CVE-2025-61194.json +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61194.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61194", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T16:15:38.663", - "lastModified": "2025-10-21T21:15:39.963", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:34:57.557", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:daicuo:daicuo:1.3.13:*:*:*:*:*:*:*", + "matchCriteriaId": "955C183A-BCCB-426E-9E29-429EA6B48DD6" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/wzy-most/zeyu-Wang/blob/main/sql/readme.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-612xx/CVE-2025-61255.json b/CVE-2025/CVE-2025-612xx/CVE-2025-61255.json index 40de0276779..3558f986955 100644 --- a/CVE-2025/CVE-2025-612xx/CVE-2025-61255.json +++ b/CVE-2025/CVE-2025-612xx/CVE-2025-61255.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61255", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T19:21:24.727", - "lastModified": "2025-10-21T21:15:40.270", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:29:51.650", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:bank_locker_management_system:-:*:*:*:*:*:*:*", + "matchCriteriaId": "3F9458E5-8EDC-4213-8B7C-0C9F0234C456" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/nikhilpatidar01/CVE-Assigned-Reports/blob/Master/CVE-2025-61255/advisory.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://phpgurukul.com/bank-locker-management-system-using-php-and-mysql/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61932.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61932.json index 78df652e776..a7627f94dd3 100644 --- a/CVE-2025/CVE-2025-619xx/CVE-2025-61932.json +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61932.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61932", "sourceIdentifier": "vultures@jpcert.or.jp", "published": "2025-10-20T08:15:33.303", - "lastModified": "2025-10-23T01:00:01.650", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T13:00:14.270", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -95,18 +95,109 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*", + "versionEndExcluding": "9.3.2.7", + "matchCriteriaId": "F9AF3F85-064B-469C-B530-7264EF91A04F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*", + "versionStartIncluding": "9.3.3.0", + "versionEndExcluding": "9.3.3.9", + "matchCriteriaId": "99DC2ADE-F5D6-45F9-B529-11C492FCDD31" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*", + "versionStartIncluding": "9.4.0.0", + "versionEndExcluding": "9.4.0.5", + "matchCriteriaId": "431F6B9C-8A9C-45FD-B287-E9E1D2B3ECEE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*", + "versionStartIncluding": "9.4.1.0", + "versionEndExcluding": "9.4.1.5", + "matchCriteriaId": "B2398AA5-1CFD-41BA-8229-84DAC45D9382" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*", + "versionStartIncluding": "9.4.2.0", + "versionEndExcluding": "9.4.2.6", + "matchCriteriaId": "0429C621-5DDE-4773-99D3-A20DC0C4798F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*", + "versionStartIncluding": "9.4.3.0", + "versionEndExcluding": "9.4.3.8", + "matchCriteriaId": "034F13F1-D926-4298-BCC9-DF424591CBF1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*", + "versionStartIncluding": "9.4.4.0", + "versionEndExcluding": "9.4.4.6", + "matchCriteriaId": "66C87047-9DE9-4CE8-80A9-AEBEB58B8402" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*", + "versionStartIncluding": "9.4.5.0", + "versionEndExcluding": "9.4.5.4", + "matchCriteriaId": "8FF0B7EE-805A-431D-96E5-BF5BDDD3178E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*", + "versionStartIncluding": "9.4.6.0", + "versionEndExcluding": "9.4.6.3", + "matchCriteriaId": "21520838-C0C4-4F66-B5C6-1B6231225FF1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:motex:lanscope_endpoint_manager:*:*:*:*:on-premise:*:*:*", + "versionStartIncluding": "9.4.7.0", + "versionEndIncluding": "9.4.7.1", + "matchCriteriaId": "C669A3EF-3A71-46C0-B1FB-455CBB78B887" + } + ] + } + ] + } + ], "references": [ { "url": "https://jvn.jp/en/jp/JVN86318557/", - "source": "vultures@jpcert.or.jp" + "source": "vultures@jpcert.or.jp", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.motex.co.jp/news/notice/2025/release251020/", - "source": "vultures@jpcert.or.jp" + "source": "vultures@jpcert.or.jp", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61932", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Third Party Advisory", + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-623xx/CVE-2025-62393.json b/CVE-2025/CVE-2025-623xx/CVE-2025-62393.json new file mode 100644 index 00000000000..7db77cab1d2 --- /dev/null +++ b/CVE-2025/CVE-2025-623xx/CVE-2025-62393.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-62393", + "sourceIdentifier": "patrick@puiterwijk.org", + "published": "2025-10-23T12:15:31.073", + "lastModified": "2025-10-23T13:15:45.973", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-62393", + "source": "patrick@puiterwijk.org" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404426", + "source": "patrick@puiterwijk.org" + }, + { + "url": "https://moodle.org/mod/forum/discuss.php?d=470381", + "source": "patrick@puiterwijk.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-623xx/CVE-2025-62394.json b/CVE-2025/CVE-2025-623xx/CVE-2025-62394.json new file mode 100644 index 00000000000..1b2f76a302f --- /dev/null +++ b/CVE-2025/CVE-2025-623xx/CVE-2025-62394.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62394", + "sourceIdentifier": "patrick@puiterwijk.org", + "published": "2025-10-23T12:15:31.583", + "lastModified": "2025-10-23T12:15:31.583", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-62394", + "source": "patrick@puiterwijk.org" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404427", + "source": "patrick@puiterwijk.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-623xx/CVE-2025-62395.json b/CVE-2025/CVE-2025-623xx/CVE-2025-62395.json new file mode 100644 index 00000000000..96f96055f32 --- /dev/null +++ b/CVE-2025/CVE-2025-623xx/CVE-2025-62395.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62395", + "sourceIdentifier": "patrick@puiterwijk.org", + "published": "2025-10-23T12:15:31.747", + "lastModified": "2025-10-23T12:15:31.747", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-62395", + "source": "patrick@puiterwijk.org" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404428", + "source": "patrick@puiterwijk.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-623xx/CVE-2025-62396.json b/CVE-2025/CVE-2025-623xx/CVE-2025-62396.json new file mode 100644 index 00000000000..9bb6df98b8b --- /dev/null +++ b/CVE-2025/CVE-2025-623xx/CVE-2025-62396.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62396", + "sourceIdentifier": "patrick@puiterwijk.org", + "published": "2025-10-23T12:15:31.913", + "lastModified": "2025-10-23T12:15:31.913", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-548" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-62396", + "source": "patrick@puiterwijk.org" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404429", + "source": "patrick@puiterwijk.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-623xx/CVE-2025-62397.json b/CVE-2025/CVE-2025-623xx/CVE-2025-62397.json new file mode 100644 index 00000000000..79bed9122bd --- /dev/null +++ b/CVE-2025/CVE-2025-623xx/CVE-2025-62397.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62397", + "sourceIdentifier": "patrick@puiterwijk.org", + "published": "2025-10-23T12:15:32.270", + "lastModified": "2025-10-23T12:15:32.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The router\u2019s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-209" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-62397", + "source": "patrick@puiterwijk.org" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404430", + "source": "patrick@puiterwijk.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-623xx/CVE-2025-62398.json b/CVE-2025/CVE-2025-623xx/CVE-2025-62398.json new file mode 100644 index 00000000000..54a20b00f39 --- /dev/null +++ b/CVE-2025/CVE-2025-623xx/CVE-2025-62398.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-62398", + "sourceIdentifier": "patrick@puiterwijk.org", + "published": "2025-10-23T12:15:32.430", + "lastModified": "2025-10-23T12:15:32.430", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-287" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-62398", + "source": "patrick@puiterwijk.org" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404431", + "source": "patrick@puiterwijk.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-623xx/CVE-2025-62399.json b/CVE-2025/CVE-2025-623xx/CVE-2025-62399.json new file mode 100644 index 00000000000..74f605a64cb --- /dev/null +++ b/CVE-2025/CVE-2025-623xx/CVE-2025-62399.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62399", + "sourceIdentifier": "patrick@puiterwijk.org", + "published": "2025-10-23T12:15:32.573", + "lastModified": "2025-10-23T12:15:32.573", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Moodle\u2019s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-307" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-62399", + "source": "patrick@puiterwijk.org" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404432", + "source": "patrick@puiterwijk.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62400.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62400.json new file mode 100644 index 00000000000..0920878194a --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62400.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62400", + "sourceIdentifier": "patrick@puiterwijk.org", + "published": "2025-10-23T12:15:32.757", + "lastModified": "2025-10-23T12:15:32.757", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-62400", + "source": "patrick@puiterwijk.org" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404433", + "source": "patrick@puiterwijk.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62401.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62401.json new file mode 100644 index 00000000000..42a93886082 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62401.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62401", + "sourceIdentifier": "patrick@puiterwijk.org", + "published": "2025-10-23T12:15:32.970", + "lastModified": "2025-10-23T12:15:32.970", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue in Moodle\u2019s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "patrick@puiterwijk.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-285" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-62401", + "source": "patrick@puiterwijk.org" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404434", + "source": "patrick@puiterwijk.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62411.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62411.json index 53f4f073693..3a091f72eef 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62411.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62411.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62411", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-16T18:15:39.747", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:31:17.607", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 2.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -47,18 +67,47 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*", + "versionEndExcluding": "25.10.0", + "matchCriteriaId": "ABE380D2-71A2-4342-B88C-D3F54C4E350A" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/librenms/librenms/commit/706a77085f4d5964f7de9444208ef707e1f79450", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/librenms/librenms/security/advisories/GHSA-frc6-pwgr-c28w", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/librenms/librenms/security/advisories/GHSA-frc6-pwgr-c28w", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62412.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62412.json index ee79d2b88a1..4b1d48134c8 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62412.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62412.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62412", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-16T18:15:39.920", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-23T12:31:34.033", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -47,18 +67,48 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:librenms:librenms:*:*:*:*:*:*:*:*", + "versionStartIncluding": "25.8.0", + "versionEndExcluding": "25.10.0", + "matchCriteriaId": "B0807962-971F-4B6B-BC01-20A7DE1B30AC" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/librenms/librenms/commit/dccdf6769976a974d70f06a7ce8d5a846b29db6f", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/librenms/librenms/security/advisories/GHSA-6g2v-66ch-6xmh", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/librenms/librenms/security/advisories/GHSA-6g2v-66ch-6xmh", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-63xx/CVE-2025-6352.json b/CVE-2025/CVE-2025-63xx/CVE-2025-6352.json index 155fafb4005..48c5b4942c1 100644 --- a/CVE-2025/CVE-2025-63xx/CVE-2025-6352.json +++ b/CVE-2025/CVE-2025-63xx/CVE-2025-6352.json @@ -2,7 +2,7 @@ "id": "CVE-2025-6352", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-20T16:15:30.430", - "lastModified": "2025-06-26T13:50:10.427", + "lastModified": "2025-10-23T12:19:51.613", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -149,8 +149,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:code-projects:automated_voting_system:1.0:*:*:*:*:*:*:*", - "matchCriteriaId": "FF05C607-002F-49FC-ABEE-CF1B3CD7762A" + "criteria": "cpe:2.3:a:fabian:automated_voting_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "AF77EC17-84D7-4FE6-8646-FE46104C4880" } ] } diff --git a/CVE-2025/CVE-2025-84xx/CVE-2025-8427.json b/CVE-2025/CVE-2025-84xx/CVE-2025-8427.json new file mode 100644 index 00000000000..c9dc636663e --- /dev/null +++ b/CVE-2025/CVE-2025-84xx/CVE-2025-8427.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-8427", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-10-23T13:15:46.113", + "lastModified": "2025-10-23T13:15:46.113", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018auto_play\u2019 parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/afec9b5b-da37-4e12-935e-9d3bb3ca01f0?source=cve", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wpbeaverbuilder.com/change-logs/", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 0838b1f03b5..3e372ebcd9f 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-10-23T12:00:11.055073+00:00 +2025-10-23T14:00:12.090643+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-10-23T11:15:31.653000+00:00 +2025-10-23T13:58:48.240000+00:00 ``` ### Last Data Feed Release @@ -33,34 +33,59 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -315339 +315354 ``` ### CVEs added in the last Commit -Recently added CVEs: `5` +Recently added CVEs: `15` -- [CVE-2025-12105](CVE-2025/CVE-2025-121xx/CVE-2025-12105.json) (`2025-10-23T10:15:32.043`) -- [CVE-2025-40643](CVE-2025/CVE-2025-406xx/CVE-2025-40643.json) (`2025-10-23T11:15:31.507`) -- [CVE-2025-41073](CVE-2025/CVE-2025-410xx/CVE-2025-41073.json) (`2025-10-23T11:15:31.653`) -- [CVE-2025-9980](CVE-2025/CVE-2025-99xx/CVE-2025-9980.json) (`2025-10-23T10:15:32.393`) -- [CVE-2025-9981](CVE-2025/CVE-2025-99xx/CVE-2025-9981.json) (`2025-10-23T10:15:32.743`) +- [CVE-2024-14011](CVE-2024/CVE-2024-140xx/CVE-2024-14011.json) (`2025-10-23T12:15:29.300`) +- [CVE-2025-10355](CVE-2025/CVE-2025-103xx/CVE-2025-10355.json) (`2025-10-23T12:15:29.840`) +- [CVE-2025-10705](CVE-2025/CVE-2025-107xx/CVE-2025-10705.json) (`2025-10-23T13:15:38.353`) +- [CVE-2025-11023](CVE-2025/CVE-2025-110xx/CVE-2025-11023.json) (`2025-10-23T13:15:44.173`) +- [CVE-2025-11128](CVE-2025/CVE-2025-111xx/CVE-2025-11128.json) (`2025-10-23T13:15:44.717`) +- [CVE-2025-62393](CVE-2025/CVE-2025-623xx/CVE-2025-62393.json) (`2025-10-23T12:15:31.073`) +- [CVE-2025-62394](CVE-2025/CVE-2025-623xx/CVE-2025-62394.json) (`2025-10-23T12:15:31.583`) +- [CVE-2025-62395](CVE-2025/CVE-2025-623xx/CVE-2025-62395.json) (`2025-10-23T12:15:31.747`) +- [CVE-2025-62396](CVE-2025/CVE-2025-623xx/CVE-2025-62396.json) (`2025-10-23T12:15:31.913`) +- [CVE-2025-62397](CVE-2025/CVE-2025-623xx/CVE-2025-62397.json) (`2025-10-23T12:15:32.270`) +- [CVE-2025-62398](CVE-2025/CVE-2025-623xx/CVE-2025-62398.json) (`2025-10-23T12:15:32.430`) +- [CVE-2025-62399](CVE-2025/CVE-2025-623xx/CVE-2025-62399.json) (`2025-10-23T12:15:32.573`) +- [CVE-2025-62400](CVE-2025/CVE-2025-624xx/CVE-2025-62400.json) (`2025-10-23T12:15:32.757`) +- [CVE-2025-62401](CVE-2025/CVE-2025-624xx/CVE-2025-62401.json) (`2025-10-23T12:15:32.970`) +- [CVE-2025-8427](CVE-2025/CVE-2025-84xx/CVE-2025-8427.json) (`2025-10-23T13:15:46.113`) ### CVEs modified in the last Commit -Recently modified CVEs: `10` +Recently modified CVEs: `96` -- [CVE-2018-15961](CVE-2018/CVE-2018-159xx/CVE-2018-15961.json) (`2025-10-23T11:12:58.507`) -- [CVE-2018-4939](CVE-2018/CVE-2018-49xx/CVE-2018-4939.json) (`2025-10-23T11:12:36.583`) -- [CVE-2023-26359](CVE-2023/CVE-2023-263xx/CVE-2023-26359.json) (`2025-10-23T11:12:54.057`) -- [CVE-2023-26360](CVE-2023/CVE-2023-263xx/CVE-2023-26360.json) (`2025-10-23T11:12:47.763`) -- [CVE-2023-29298](CVE-2023/CVE-2023-292xx/CVE-2023-29298.json) (`2025-10-23T11:11:19.167`) -- [CVE-2023-29300](CVE-2023/CVE-2023-293xx/CVE-2023-29300.json) (`2025-10-23T11:13:06.377`) -- [CVE-2023-38203](CVE-2023/CVE-2023-382xx/CVE-2023-38203.json) (`2025-10-23T11:13:14.557`) -- [CVE-2023-38205](CVE-2023/CVE-2023-382xx/CVE-2023-38205.json) (`2025-10-23T11:13:19.100`) -- [CVE-2024-20767](CVE-2024/CVE-2024-207xx/CVE-2024-20767.json) (`2025-10-23T11:13:22.983`) -- [CVE-2025-2704](CVE-2025/CVE-2025-27xx/CVE-2025-2704.json) (`2025-10-23T11:15:31.207`) +- [CVE-2025-42926](CVE-2025/CVE-2025-429xx/CVE-2025-42926.json) (`2025-10-23T12:43:32.437`) +- [CVE-2025-42936](CVE-2025/CVE-2025-429xx/CVE-2025-42936.json) (`2025-10-23T12:41:58.860`) +- [CVE-2025-55096](CVE-2025/CVE-2025-550xx/CVE-2025-55096.json) (`2025-10-23T12:32:46.373`) +- [CVE-2025-55097](CVE-2025/CVE-2025-550xx/CVE-2025-55097.json) (`2025-10-23T12:32:54.340`) +- [CVE-2025-55098](CVE-2025/CVE-2025-550xx/CVE-2025-55098.json) (`2025-10-23T12:33:08.293`) +- [CVE-2025-55099](CVE-2025/CVE-2025-550xx/CVE-2025-55099.json) (`2025-10-23T12:33:01.977`) +- [CVE-2025-55100](CVE-2025/CVE-2025-551xx/CVE-2025-55100.json) (`2025-10-23T12:33:27.570`) +- [CVE-2025-57164](CVE-2025/CVE-2025-571xx/CVE-2025-57164.json) (`2025-10-23T12:33:49.467`) +- [CVE-2025-59438](CVE-2025/CVE-2025-594xx/CVE-2025-59438.json) (`2025-10-23T12:35:35.187`) +- [CVE-2025-59536](CVE-2025/CVE-2025-595xx/CVE-2025-59536.json) (`2025-10-23T12:46:37.910`) +- [CVE-2025-60337](CVE-2025/CVE-2025-603xx/CVE-2025-60337.json) (`2025-10-23T12:30:45.210`) +- [CVE-2025-60338](CVE-2025/CVE-2025-603xx/CVE-2025-60338.json) (`2025-10-23T12:30:55.257`) +- [CVE-2025-60341](CVE-2025/CVE-2025-603xx/CVE-2025-60341.json) (`2025-10-23T12:30:34.360`) +- [CVE-2025-60342](CVE-2025/CVE-2025-603xx/CVE-2025-60342.json) (`2025-10-23T12:30:02.370`) +- [CVE-2025-60358](CVE-2025/CVE-2025-603xx/CVE-2025-60358.json) (`2025-10-23T12:31:42.327`) +- [CVE-2025-60359](CVE-2025/CVE-2025-603xx/CVE-2025-60359.json) (`2025-10-23T12:34:03.940`) +- [CVE-2025-60360](CVE-2025/CVE-2025-603xx/CVE-2025-60360.json) (`2025-10-23T12:34:14.797`) +- [CVE-2025-60361](CVE-2025/CVE-2025-603xx/CVE-2025-60361.json) (`2025-10-23T12:35:50.440`) +- [CVE-2025-61181](CVE-2025/CVE-2025-611xx/CVE-2025-61181.json) (`2025-10-23T12:35:14.943`) +- [CVE-2025-61194](CVE-2025/CVE-2025-611xx/CVE-2025-61194.json) (`2025-10-23T12:34:57.557`) +- [CVE-2025-61255](CVE-2025/CVE-2025-612xx/CVE-2025-61255.json) (`2025-10-23T12:29:51.650`) +- [CVE-2025-61932](CVE-2025/CVE-2025-619xx/CVE-2025-61932.json) (`2025-10-23T13:00:14.270`) +- [CVE-2025-62411](CVE-2025/CVE-2025-624xx/CVE-2025-62411.json) (`2025-10-23T12:31:17.607`) +- [CVE-2025-62412](CVE-2025/CVE-2025-624xx/CVE-2025-62412.json) (`2025-10-23T12:31:34.033`) +- [CVE-2025-6352](CVE-2025/CVE-2025-63xx/CVE-2025-6352.json) (`2025-10-23T12:19:51.613`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 518f5db5a1a..bc0e1362e2f 100644 --- a/_state.csv +++ b/_state.csv @@ -101064,7 +101064,7 @@ CVE-2017-17549,0,0,b1774e534daa2ba53e94b9ebbbd423de2d7dfa23ed7e14bed266f89affd1c CVE-2017-1755,0,0,93bfd8ddb1cf9e61f449357ca469ece12c88c5cfc4ab6d007cbe19bc62de5215,2024-11-21T03:22:19.090000 CVE-2017-17550,0,0,52fbfe0ae85f8339ae91adfa857f2f8eba1b62f9ebfb5dfef413909642247a85,2024-11-21T03:18:08.590000 CVE-2017-17551,0,0,930b6065bd63dd7f91e569af577d42e0a09f67a7136c6af2de0c870578f309b9,2025-04-20T01:37:25.860000 -CVE-2017-17552,0,0,e57fd47946895504d31fd92595112274ba45d56bfe316d31a9e93deee65762e3,2024-11-21T03:18:08.933000 +CVE-2017-17552,0,1,02979202ec7747ddfc22b6770a50ebf9841d59295e4bee9a1f0affe0070e8f76,2025-10-23T13:52:46.107000 CVE-2017-17553,0,0,a29c0e42e1866e886364a07b5822ded4d8d8bd40e9e5c4d15dd29d6dc91804b2,2025-04-20T01:37:25.860000 CVE-2017-17554,0,0,36f2d308d4bc432a8450d373d858c60d185b124f6ffae199470415248b4bad16,2025-04-20T01:37:25.860000 CVE-2017-17555,0,0,ac39b9d4512f103784d5b417f19e99e24966159fddf60c070cbadf0324b97391,2025-04-20T01:37:25.860000 @@ -116595,7 +116595,7 @@ CVE-2018-15957,0,0,741963103f3159ad35d42207304a9c763c8a5d821580168f2b11006673c63 CVE-2018-15958,0,0,8148841a2368aa192b01791490ebb39e28cffb041378ed2b03c761681c0ca1bc,2025-05-06T15:15:53.513000 CVE-2018-15959,0,0,5f919c665d963bc57c9098f23dffcd562342b9b606a60a06304a30747e9e7b94,2025-05-06T15:15:53.677000 CVE-2018-15960,0,0,a4820e78d3f3ff49c05bce547803a74dc7a101fd9f753a1b3f5d6ac75e1e681a,2024-11-21T03:51:48.560000 -CVE-2018-15961,0,1,68dfaaf8bd37633319f6a7c30e56c35df711b79917e8f965fdfc674c7174dbad,2025-10-23T11:12:58.507000 +CVE-2018-15961,0,0,68dfaaf8bd37633319f6a7c30e56c35df711b79917e8f965fdfc674c7174dbad,2025-10-23T11:12:58.507000 CVE-2018-15962,0,0,f4a51c8beec75407c868ee862f737e031838102904ae4fdf960d8590b3e6ccab,2025-05-06T15:15:53.840000 CVE-2018-15963,0,0,d3e63bff7fa3608cdf596c60471385c5dd8ed4d12074771b0af076573d13e9a3,2025-05-06T15:15:54.020000 CVE-2018-15964,0,0,19a2663aea4f0c956671aeb40ac8ff58a05177d4ee2ae0d199a0cb10228c5390,2025-05-06T15:15:54.197000 @@ -123711,7 +123711,7 @@ CVE-2018-4935,0,0,399998ac67f634b872f680c3ab88b518d1b7522c988571ccde1825342ee456 CVE-2018-4936,0,0,271ca644a13b593428b1d96d5ee35c1fb7bedfe88af2b402336b313e1b9390fd,2024-11-21T04:07:44.760000 CVE-2018-4937,0,0,96a07bf209f86ba011673cf73c0d98ce9c8331c74e615eae43383c5e8a71fc41,2024-11-21T04:07:44.890000 CVE-2018-4938,0,0,fabc56da66caeeefb09d01c01f02bcfbf2b5e0b3ccb7c6fdfbb744e69a625e78,2025-05-06T15:15:56.700000 -CVE-2018-4939,0,1,ccd33ba9f931ae85253b4b235d4590013dee0a1602df0ebad0aa86d0699b6e90,2025-10-23T11:12:36.583000 +CVE-2018-4939,0,0,ccd33ba9f931ae85253b4b235d4590013dee0a1602df0ebad0aa86d0699b6e90,2025-10-23T11:12:36.583000 CVE-2018-4940,0,0,58e9c596099b32df415dedd77c2fabcf01942da5d842274955e956635e9fc36f,2024-11-21T04:07:45.277000 CVE-2018-4941,0,0,c9746042e985ba715e6224aa8d5e3ca3bc94efb2036fe1778d418e1de275b807,2024-11-21T04:07:45.403000 CVE-2018-4942,0,0,fbea59b7629038198a0e95f04005a48a880a0ade920d37e7fdc45795db85b7cb,2025-05-06T15:15:56.893000 @@ -214403,20 +214403,20 @@ CVE-2022-49601,0,0,1c677c8bc256d034be87b127718d0c645b0d4e9c9c5f633b78dabbf949b3a CVE-2022-49602,0,0,1d7fd7cc001d53497e839c4db7fed5b38fc559a7dffd2c1f624cc20ac6c6dacb,2025-10-01T20:16:55.160000 CVE-2022-49603,0,0,65aede4ef56eee055d13a1ccf1cf39591b52966c02a05bf5126a769f660f6749,2025-10-01T20:16:55.540000 CVE-2022-49604,0,0,c190b6812aa9ab113014dd0f0c35698532472b5fe93d84032fd7c72a7a9d842a,2025-10-01T20:16:55.890000 -CVE-2022-49605,0,0,81564a466da5c8e8a9e89309cc4c57761b20c12bdbbfaf8a4154aaa81300b2f4,2025-02-26T07:01:36 -CVE-2022-49606,0,0,b4136faf8c7d11956847f93df6097107ca4f9830a00cb15762b94df74585521f,2025-02-26T07:01:36.093000 +CVE-2022-49605,0,1,2001beeea2608c41a2e2418d11fbba32cf243977482fd9a813f855a18e5d8d0b,2025-10-23T12:08:07.613000 +CVE-2022-49606,0,1,d47ca7a1e850f5173aef939e1c01bad92cbf78ff04f5746b2f3d77eac442c9f4,2025-10-23T12:08:16.290000 CVE-2022-49607,0,0,e6058ac169d198412527e69bae7d0515eae97af7c012951ad662f060a819d340,2025-10-01T20:16:56.077000 CVE-2022-49608,0,0,f817b590c15779aa6562d665a90450849a034be70c1bcc8418fb860281a4c667,2025-10-01T20:16:56.300000 CVE-2022-49609,0,0,40c81a5d02cc1965cd33120d3f9c1fe4c45f5a7c2dc57cb958fc28d1ba974e81,2025-10-01T20:16:56.540000 CVE-2022-4961,0,0,05f2ffcd05e2d23e254218df57459bbdd8360d7bb570b059f299fba2169a2704,2024-11-21T07:36:20.120000 -CVE-2022-49610,0,0,9632ec089628b3a3e283f96fc45c03469f6a5410238e11a8b089813d343ea6fe,2025-02-26T07:01:36.463000 -CVE-2022-49611,0,0,8111830a6215ddb0fe2a956868525b6f9532c8f59a9366f27f9f3f0d1526cc67,2025-02-26T07:01:36.553000 -CVE-2022-49612,0,0,881cd933fa62ec04545a34bcba5215cd8aa457f9744293b374bbfc29eea376d0,2025-02-26T07:01:36.653000 -CVE-2022-49613,0,0,2f6880cd9536b6484f0d7a54a0d250be6f0f33d09b238dfc2f4fa8462588df86,2025-02-26T07:01:36.747000 +CVE-2022-49610,0,1,3f9350786c39681dd4f4ee30aee73c178d598cc6aff4b9125387222ab6aa48c7,2025-10-23T12:08:23.073000 +CVE-2022-49611,0,1,f34cb889dddc3687e0af0e50bb73ea35e819b7320d42d7a67d96abddd3e3014c,2025-10-23T12:08:28.643000 +CVE-2022-49612,0,1,60f2eb7080cc46eebadf0d2e863dd99c2f76789f0b471e63357afee6bc97cc2b,2025-10-23T12:08:35.080000 +CVE-2022-49613,0,1,e2cc00f582a1c5d2625296224d7d73363f296b8611377070f05af0e0e266ea1d,2025-10-23T12:08:40.867000 CVE-2022-49614,0,0,0c0cc93db34eafc8b46e404b2ade125e91ff81e0ea0c0d87408e17b6f9894992,2025-03-06T16:15:39.210000 CVE-2022-49615,0,0,5f8b34d2175ab1411c197f03f837548f58c44eac670069622dbee0d442302114,2025-10-01T20:16:56.760000 -CVE-2022-49616,0,0,bdf0dc40c44ee04837679d239d916c9b171c9018d8f231acab3c09b56455b7db,2025-02-26T07:01:37.017000 -CVE-2022-49617,0,0,ebec9884dd1a40528fb56bb4a6c950a7db9bb05155d3b1fc4b853d0170d3999b,2025-02-26T07:01:37.107000 +CVE-2022-49616,0,1,ad1496bf923e1beb1bdc8055be5ee01cad85486b35b40dbf8fd22f8ec0fa89f3,2025-10-23T12:08:47.673000 +CVE-2022-49617,0,1,7c2548f6912d48ffcd169e3b9dd79e0a7860c758c72acfa5d112f447a36d2a7d,2025-10-23T12:08:55.163000 CVE-2022-49618,0,0,56b9e555bb31b2f8efe7bd46b96e96bcfff35f268463473e13d5ccf26ab12ef8,2025-10-01T20:16:57.047000 CVE-2022-49619,0,0,0b51ac7e42a99fca3b77a777c46e0644061784896e0f705fa82e13cc31f9b978,2025-10-01T20:16:57.263000 CVE-2022-4962,0,0,386805a0e4416acdab18cedde9e47f610c5ba3ec156161822cfc562e819f4b4c,2024-11-21T07:36:20.270000 @@ -214424,11 +214424,11 @@ CVE-2022-49620,0,0,57903a9cb4e9d4506122dfb835b83a61333efc37cb3832fd77b503c85caa0 CVE-2022-49621,0,0,0630bf8e0b5f745e667e1939e7f3ab8ad806d8de21aba50945a743c3a9a52fdf,2025-10-01T20:16:57.690000 CVE-2022-49622,0,0,f69d653ded9b7c235d9a2e3137671a656277b6d7e663198e88c75c5a5c6d4e21,2025-03-24T19:48:44.753000 CVE-2022-49623,0,0,ab1f13e5e963fd3f4e88deacf85c3a3b1aa4b54228e7eda3bf5ccd1b4ad5a51f,2025-10-01T20:16:57.890000 -CVE-2022-49624,0,0,8daf94741fd4bfd341c15f574119255b10de06c06b501849b7f2eff9ebcce2f9,2025-02-26T07:01:37.753000 -CVE-2022-49625,0,0,a666226bbaeda20bfc58662e730585169c700df883534fb3d2b3980f09237b10,2025-02-26T07:01:37.847000 +CVE-2022-49624,0,1,b0eec0f1ccc0b2d13a30aefa5bef9b4b5b21c16ac1afe16094c332feb6c62b35,2025-10-23T12:09:05.757000 +CVE-2022-49625,0,1,abc9525fa6804b31f1dfb2d0cca1e7f6c57127a898455809f7811f40f9cb1fd7,2025-10-23T12:09:13.967000 CVE-2022-49626,0,0,629a88bac99e067c720484ad12167ec7594046dc06e1da6cf024ab7bc9530754,2025-03-24T19:49:38.357000 CVE-2022-49627,0,0,73dd9017d3e60d2fd0418c996b9dd1f85e0dff3cfa6f95f1d51d43a6b732ac6a,2025-10-01T21:15:41.260000 -CVE-2022-49628,0,0,450e5712615f0c17c8ff952909dcbf6671bdf291bd4ffd5761a2592c2f23c2e2,2025-02-26T07:01:38.117000 +CVE-2022-49628,0,1,eaf2c4e978b1a4ace7d9f94ef0b40ddba7dc46360cd0583ade8ad1097dab19be,2025-10-23T12:09:21.370000 CVE-2022-49629,0,0,1331832ff64e4c959ac9ddf042a133713b936a099769704063ace6e4062b5ca9,2025-10-01T20:16:58.097000 CVE-2022-4963,0,0,0195fdb1c519ec8057fa88d91927f16a9252b8cd6158c29e01101ac99d7edd07,2025-03-05T18:36:15.163000 CVE-2022-49630,0,0,b504c43873acdbf52e0d48bce3c550119258ee5105595d0ec36aba2b60ef1319,2025-10-01T20:16:58.613000 @@ -214436,7 +214436,7 @@ CVE-2022-49631,0,0,ae0ccbfdcdd62c3670b7f2bbf7f9ad000f085f61e97e9849e747c7b87ffca CVE-2022-49632,0,0,bf04ee97bfb05a83b6819bea17ce9c467737527824e25f9ad30675cb839474e9,2025-10-01T20:16:59.047000 CVE-2022-49633,0,0,9c469a97a8025db355480ee86a3179b791b1fc1dad24efbb02e6d2f18b74274b,2025-10-01T20:16:59.260000 CVE-2022-49634,0,0,5887f31fa871b3793cd36106fa3b0ad90cede0f5ef963baaa413e5bd1278a33d,2025-10-01T20:16:59.490000 -CVE-2022-49635,0,0,acb2b4ba624516c0ac8db97854d6e55fff9e0d10b1b963077ffc8057b1f5357d,2025-02-26T07:01:38.733000 +CVE-2022-49635,0,1,3d2d73b19e81ddab18c77c4e9206dbd7e033678428404ef8a669d4d51e596679,2025-10-23T12:09:27.170000 CVE-2022-49636,0,0,e97602dcbdba3ba2c4a2ee9444c4f1408607b7f940162fda9b91209e8cfb691a,2025-04-10T13:15:43.703000 CVE-2022-49637,0,0,c84fb128b3c1e58813766f5c1e203c6d752d4b6225bfa94fa9dfcd0f7018b3f4,2025-10-01T20:16:59.700000 CVE-2022-49638,0,0,6b6cd31564c681f37bb693cb33f54896e57d467a5013e9da0c0cc682565d37d8,2025-10-01T20:16:59.930000 @@ -214444,24 +214444,24 @@ CVE-2022-49639,0,0,ec93ddb2e5f786ab674fcc571a638831ec929e53633cc87791e47df9350c2 CVE-2022-4964,0,0,a3fbda73682405cf931aecf3cdf6223c5537d315f8fdd8e942bb88f535a69f39,2025-06-20T20:15:23.290000 CVE-2022-49640,0,0,50860f56dc78176298dc6771c8bd436cfd2a9eb76b714ce40169ab3b857f2482,2025-10-01T20:17:00.363000 CVE-2022-49641,0,0,a3a626a3a6364e3e490557ec0bcca0ed8ad40c229ca2fe8b79ec1acef1ead37d,2025-10-01T20:17:00.577000 -CVE-2022-49642,0,0,eed9507f855969a103ffaadd6b2826b1bbce172df653364510dad2cb54ced6ce,2025-02-26T07:01:39.373000 +CVE-2022-49642,0,1,004ff6a758ad26339837c5f27582414b848d869338bd8bcf348204041d41fcf3,2025-10-23T12:09:33.470000 CVE-2022-49643,0,0,599ae0f7f95e2fc5b8ae4a466185a64a8966938734e73ddcf05d71a927734370,2025-10-01T20:17:00.783000 CVE-2022-49644,0,0,a620173cfd9d197da47a5509596a36520ede88ae6e19811d23ffae27f81f6679,2025-10-01T20:17:01.370000 -CVE-2022-49645,0,0,7e18657ecaeca65c8c275650971ed38c7bc18f166ae31abf789c2b4f5948d0c1,2025-02-26T07:01:39.677000 -CVE-2022-49646,0,0,0a278852832874bf36bbf9ab461f604afea235b75fc0f3c0fb35efbe6af00314,2025-02-26T07:01:39.777000 +CVE-2022-49645,0,1,1042dab92ad936b7efe7f44b03efb6cfc242c35c860c75e02da116ecc30d5f2e,2025-10-23T12:09:40.340000 +CVE-2022-49646,0,1,2521d6bf008704f2d2f1ee1828e7c537f8142638a5c9899740c1768a33dcb9c7,2025-10-23T12:09:45.900000 CVE-2022-49647,0,0,ec55610701811b8713b0d0315b37534971bdcb08871eb0844d68aa7731265a79,2025-03-24T19:00:58.960000 CVE-2022-49648,0,0,0cdb9d038aed88a1fbb56f421478e74456d7662908d20137cf4eb80929a5d2fc,2025-10-01T20:17:01.683000 CVE-2022-49649,0,0,c3693f486e04c398aefe0fd0ce7ed245c07c14bcfa14ad46283452a124105dae,2025-10-01T20:17:01.923000 CVE-2022-4965,0,0,60520f7fe367ad75afc49cb5a38d09f60dd060ea4cbc4cab5dd51ee8b1f8d468,2024-11-21T07:36:20.697000 -CVE-2022-49650,0,0,438b6bc446abd19c68f606078e1f5d877c56d955c348ec6a26093fe630c82b5f,2025-02-26T07:01:40.150000 +CVE-2022-49650,0,1,2b7fc670ff575a494a7028f45ca3b5ec40c9c45c4be7a354bf10f8bc300283f9,2025-10-23T12:10:24.633000 CVE-2022-49651,0,0,4a0465b23ee065a54524b071e4c87773c1424e1a0ddeb14d49348a152feea900,2025-03-24T19:03:58.443000 CVE-2022-49652,0,0,cd7d85b87040cbfbe5ba7798fa64ca1b871095d0c756f582be35c602137e53a9,2025-10-01T20:17:02.130000 CVE-2022-49653,0,0,1a5965bdf750d1901c713954e1aced0a66ac3458ba7d3a570caa50407145628a,2025-10-01T20:17:02.343000 -CVE-2022-49654,0,0,3a329bd545b2d86d89651b48227fe24274164556274fe21035c29dbc0a6daae2,2025-02-26T07:01:40.510000 -CVE-2022-49655,0,0,4e1b7d54762b4f24bbc88954a963b3c0e748387aa86bf3916f21e41553ed98f2,2025-02-26T07:01:40.600000 +CVE-2022-49654,0,1,75338535665b17405663ed4de72b23ce966f91f0b5157c59bf8c0ecaf23b24fa,2025-10-23T12:10:32.530000 +CVE-2022-49655,0,1,07c51c0b8c09905f0a1990e4ba2ec06a7d3ebcb234049d7d2c8c1926f34f54a0,2025-10-23T12:10:40.303000 CVE-2022-49656,0,0,8d43659e67019a0eef00c553b48480b799c21dd76df029ffd201d8a35aaee4be,2025-10-01T20:17:02.560000 CVE-2022-49657,0,0,2c5dc3f2b8d8fd53fdb20db60572e107b078031f5a3f9530eb904e34d1980768,2025-10-01T20:17:02.750000 -CVE-2022-49658,0,0,abb2f9b1c683bb1cc6e729f6c067730bde14817e4a82801c579086d7291c9402,2025-02-26T07:01:40.867000 +CVE-2022-49658,0,1,094ec46933ed399d6601363e24dce23c87525cea74c79e9c168a5405866a70b7,2025-10-23T12:10:50.553000 CVE-2022-49659,0,0,b36e81ab470acfe0e8ad70fa6dcc2f0ded36e7a3865b42d6ebc436a1e1ff0b04,2025-10-22T17:30:40.430000 CVE-2022-4966,0,0,b9d213db176e3f688cb999f6fb4e9d706d4dd4cb8237e2d70136404a8893c1f5,2024-11-21T07:36:20.813000 CVE-2022-49660,0,0,d4790bfa84025c03cdb65ab4b0738cdd799d4b81d425161ae2d3f674b999f588,2025-02-26T13:15:34.227000 @@ -222726,9 +222726,9 @@ CVE-2023-26354,0,0,d83da464370f46847b0d80fb6c89d96c2e88a1051c98bf3b86d9fd0eb9300 CVE-2023-26355,0,0,e7bc13800714c9cc465f4a9f999083c10327653bab866582e972333aff7d98c9,2024-11-21T07:51:11.497000 CVE-2023-26356,0,0,a688002633f67811b9957bb90e9ce236f669f90493398560e569abe0d6ad6b53,2024-11-21T07:51:11.620000 CVE-2023-26358,0,0,6319ca598176a86fc26b4735b2b9387d84cc603644e353ae978188afa6946328,2024-11-21T07:51:11.740000 -CVE-2023-26359,0,1,87a0376f776af0ccbbac786a7ed0f9cb4a5885b1984e48aee88f126f623a9bd1,2025-10-23T11:12:54.057000 +CVE-2023-26359,0,0,87a0376f776af0ccbbac786a7ed0f9cb4a5885b1984e48aee88f126f623a9bd1,2025-10-23T11:12:54.057000 CVE-2023-2636,0,0,bfa05a2426677b61307c0337ccfa5b4aced4400f47f3baef7a84cfb95b4ed7c0,2024-11-21T07:58:58.603000 -CVE-2023-26360,0,1,bfff2243c0ce091ebbf923ac73cbbc53250b73c8a406616ed99832e6f3cd6bf6,2025-10-23T11:12:47.763000 +CVE-2023-26360,0,0,bfff2243c0ce091ebbf923ac73cbbc53250b73c8a406616ed99832e6f3cd6bf6,2025-10-23T11:12:47.763000 CVE-2023-26361,0,0,8fb9762afa2f45fcd335cb7d355e6ed5ae3746de61a024f5f1bceb74a289dd0e,2024-11-21T07:51:12.133000 CVE-2023-26364,0,0,231f6d8c70e123fda0e8cbc05f758925688da3833acb109aeb533fb2af6496be,2024-11-21T07:51:12.257000 CVE-2023-26366,0,0,3c4dd120767d8a02d7d99951769b5b4c54f1546609c8fd50f858ff4c89cf37ef,2024-11-21T07:51:12.390000 @@ -225213,10 +225213,10 @@ CVE-2023-29294,0,0,ef7cd04d3f136af1170356270b52411ce4720180a394aa1a743625fff12d7 CVE-2023-29295,0,0,7012cc71e17bbb022588eea358e6371505712615a600fa3c65dda0bd15cc6fe0,2024-11-21T07:56:48.960000 CVE-2023-29296,0,0,08226f027e8ccbad9964c530cfadd6a1c5dcb86df6a7c7fa1fcaf2c6ea328caf,2024-11-21T07:56:49.063000 CVE-2023-29297,0,0,eeca1d0d1e519cc752bf368abbc31bdf34de6c67c199a7547cee2ba07e7ed5b3,2024-11-21T07:56:49.170000 -CVE-2023-29298,0,1,75c689605c47ed95b23daa79dd464f593892c3ff35a9dcf26230d14bde7b2d9d,2025-10-23T11:11:19.167000 +CVE-2023-29298,0,0,75c689605c47ed95b23daa79dd464f593892c3ff35a9dcf26230d14bde7b2d9d,2025-10-23T11:11:19.167000 CVE-2023-29299,0,0,4364bee4781b8777843f562bfc9fd1e0cbe8174c206716f313172e1a4ec60df5,2024-11-21T07:56:49.393000 CVE-2023-2930,0,0,326e43aa75930e9cff1a01c53e704566e31e46afb6a633c1e9542d5941c443d6,2025-05-05T16:15:37.467000 -CVE-2023-29300,0,1,2767bdc513bab406dc0af92737664f5d581c8d33394a6c895202f2d2be714c3e,2025-10-23T11:13:06.377000 +CVE-2023-29300,0,0,2767bdc513bab406dc0af92737664f5d581c8d33394a6c895202f2d2be714c3e,2025-10-23T11:13:06.377000 CVE-2023-29301,0,0,97821ce2efc683de5073aaf8cd53d0ec5774d819c3c22e17acd8a88f4453d0eb,2024-11-21T07:56:49.620000 CVE-2023-29302,0,0,aaae803fa91c9d975218b7136fcffcdedd322f9966e8e400abff1e7dba7ff8a7,2024-11-21T07:56:49.727000 CVE-2023-29303,0,0,4ee1da86490ef442da8ee1ad650354f6577da406f60db548da49f23c46787bf4,2024-11-21T07:56:49.833000 @@ -232007,9 +232007,9 @@ CVE-2023-38199,0,0,f41eb944e837487650881a3c150a8371d0677936fcf8f3fbefd34baaf03f9 CVE-2023-3820,0,0,544ccc59fafcaa69b73c09b2da55f449f67efa656c5025b92e12a3b668f813fe,2024-11-21T08:18:08.507000 CVE-2023-38200,0,0,79ff2917485b5ebce56fe49d8e4bbef7415f06d56ee22034351b677b07ffa298,2024-11-21T08:13:04.287000 CVE-2023-38201,0,0,68157ee20699a6540717a2af24bdd19434ccc2982c4bd9b07403927ad1af116f,2024-11-21T08:13:04.463000 -CVE-2023-38203,0,1,a21669262115aad9bbf85ac1cfabcd26a26762cec6c74d574a8676fcf4644e77,2025-10-23T11:13:14.557000 +CVE-2023-38203,0,0,a21669262115aad9bbf85ac1cfabcd26a26762cec6c74d574a8676fcf4644e77,2025-10-23T11:13:14.557000 CVE-2023-38204,0,0,aff07e094443bd22eb679c063cc0b8e0eacbd5a4af82b8093d4a747db10a7481,2024-11-21T08:13:04.777000 -CVE-2023-38205,0,1,b290610ca247561f3f12a860ed0b23cb718545fad261eef8f91c497c8e6033bb,2025-10-23T11:13:19.100000 +CVE-2023-38205,0,0,b290610ca247561f3f12a860ed0b23cb718545fad261eef8f91c497c8e6033bb,2025-10-23T11:13:19.100000 CVE-2023-38206,0,0,cc7e26177d5c97bc7992fad0ecb9b985fe0e4dfe94c2e5e43ed612b8776e21a5,2024-11-21T08:13:05.067000 CVE-2023-38207,0,0,af6acf19a76f53fe72babd6f354242829d49081279359ae591e2f8c2bda6a263,2024-11-21T08:13:05.193000 CVE-2023-38208,0,0,509f11fd7776db969c954a03db4fbdd24eed7e5364d6ec40d7fe2048a5e09036,2024-11-21T08:13:05.317000 @@ -245684,8 +245684,8 @@ CVE-2023-7116,0,0,44a555ff97b4aa24d4fbfa8bca5be847156c5781515147826a91561191258d CVE-2023-7123,0,0,7c84b6f5ec5b82c7c34d44d86064f05315efa082aad5342015882acedc9b5063,2024-11-21T08:45:18.943000 CVE-2023-7124,0,0,66abf63f32a3e48229ab433964a16179b1e237a50b40a5cd19a9e81c6d2c3723,2024-11-21T08:45:19.080000 CVE-2023-7125,0,0,29d65615d7f16334ef98923a752939fba8dcbeea75ec027a40b459aa191a2c30,2025-06-17T21:15:33.470000 -CVE-2023-7126,0,0,aec61fc030a34b831c87d0cbdeb1e0c703d00d5ae22cee10b4470161145dc5ca,2024-11-21T08:45:19.340000 -CVE-2023-7127,0,0,b91027aafede8ce8b4c44a04745e572f3e455a3746ad2cd892c1eb52b945459b,2024-11-21T08:45:19.487000 +CVE-2023-7126,0,1,a1b1cb9751e6cf6a96a8854f651714122c5a41af587b4b03bff224ccab5a2d9b,2025-10-23T12:19:51.613000 +CVE-2023-7127,0,1,88a9a73e4081a80bec5c813c784624658f5831208199cce1b7135b8c09a4547a,2025-10-23T12:19:51.613000 CVE-2023-7128,0,0,5ad4a6b60d3a68b181609e7d5cb639994cd5f45cd8b2d67dc49fe216fb00b6dd,2024-11-21T08:45:19.627000 CVE-2023-7129,0,0,15de185af3e2ddf82f4fa50af646917540d48aaa48e0f1c864377b7becfdfea1,2024-11-21T08:45:19.770000 CVE-2023-7130,0,0,89acbdc625416ce7b75e568e4ddf20b20114e56068ca92d4d6c895c6eb3d9fc4,2024-11-21T08:45:19.910000 @@ -250957,6 +250957,7 @@ CVE-2024-13990,0,0,5cacbf9dc722b227a818d8d7a1d3db2eb067cffd31f7a8246ff2d75c13725 CVE-2024-13991,0,0,eed7ed2f74183ba2d6ccf5ebb007031b3ef02a76f52d6233c82d64f7d7c356c6,2025-10-16T15:29:11.563000 CVE-2024-1400,0,0,bac94fa923e5d8ff034c18d15cece1c7c0b0b8e72e665f80cf1c9da5ac122607,2025-02-05T20:56:20.887000 CVE-2024-1401,0,0,3f5a6ec4e213aaaa2419af3f9010e903695273207314f34dc54b8c7847ee5e52,2025-05-05T18:51:21.257000 +CVE-2024-14011,1,1,ea7de1b34d8dc0a8fd07a23e222e9106ca1311181feadab3103a9d4da11623e4,2025-10-23T13:15:37.483000 CVE-2024-1402,0,0,c16a2bb5e28338a9b7a8e909fd1180bd46f3314048e1fd4a395f2a2357ace438,2024-11-21T08:50:30.447000 CVE-2024-1403,0,0,586131040c12c42e3d4d259065af315a9ce447a030f9164bd11968bf5202492a,2025-02-11T17:40:59.267000 CVE-2024-1404,0,0,72e7bfa50d663f6618ea5cb7b36bb28904508f29cf1e05b2cbe5def310af3816,2024-11-21T08:50:30.790000 @@ -252130,7 +252131,7 @@ CVE-2024-20763,0,0,85e3d365bd8f70bb83e697510efbc0c1af98cc029e70ebe9045e9cb8471b8 CVE-2024-20764,0,0,a080d634ce17b8cdbb85357fca6cda5d794fe7d9539aa4c5f46ce35e5c1cac27,2024-12-04T15:15:25.463000 CVE-2024-20765,0,0,e8dca53e77a72b7fe76926e1cedeafa7eeeb182c51dacba5a7ceb9bf3920638e,2025-02-07T17:25:32 CVE-2024-20766,0,0,95ac04a20504881d574a50944d27c002096349013c0a37ca7842a8653794b342,2024-12-05T15:18:04.873000 -CVE-2024-20767,0,1,969d1ab833765a80758d7719c27343331019285b53316b09b5656f136572e519,2025-10-23T11:13:22.983000 +CVE-2024-20767,0,0,969d1ab833765a80758d7719c27343331019285b53316b09b5656f136572e519,2025-10-23T11:13:22.983000 CVE-2024-20768,0,0,5cfbec6f58ac0ddaff40efa6f7a3cd9811b930452273e0862a7b84351ebbd04e,2024-12-03T21:46:08.623000 CVE-2024-20769,0,0,6f13dc6481e3cb8cd025c6fbd6c6e0274141093e081dce88926d28d6a572c19b,2024-11-21T08:53:07.133000 CVE-2024-2077,0,0,d186f54d9f8a90379d391459b9a5cb9d8307f4f1713a18aa8bf99e9d56318c5c,2024-12-09T22:39:42.837000 @@ -258108,7 +258109,7 @@ CVE-2024-28161,0,0,927dd6ce33cb33fb490ec2d62337fae94a8553e2374ceb54a84eddaee5300 CVE-2024-28162,0,0,3e654a67e26f4b5e402dfdfe3c67c3e19059c2d3956192bd162ec0d871548037,2025-05-07T14:27:52.307000 CVE-2024-28163,0,0,abb1d67c22247bf29767b35fd7e5202a82e0fd36ef826ec8591addec9a57309f,2025-02-07T17:24:35.943000 CVE-2024-28164,0,0,24b2fc8e011258c1fe15ee039c82029ed20288c63d204c64789ef05d689e62b6,2024-11-21T09:05:56.460000 -CVE-2024-28165,0,0,00fe9dbcfbda7d0502bb925a273755d2fe9045ac911ce8d0f0780a1aff2e17a6,2024-11-21T09:05:56.627000 +CVE-2024-28165,0,1,bd489f8f9587fca9bd5bf0ee88d223d5d7be58617325754528493c8dc4c94a53,2025-10-23T12:20:36.727000 CVE-2024-28166,0,0,b670e69a661f4b4462a01a2c3528eb19c5119273a8b336fbc2f2a949bf2dcbf5,2024-12-10T07:15:04.890000 CVE-2024-28167,0,0,ea7dda0032e16a90beabc9010f67cb5afcf61578d494e1efd177d5ad7f1a783d,2024-11-21T09:05:56.840000 CVE-2024-28168,0,0,ba1c659115e4d744b23f7a1c47b88c065714ddb475ae20bbffa712caa7695493,2025-07-16T17:19:18.807000 @@ -261485,11 +261486,11 @@ CVE-2024-32730,0,0,695fe6159fd605a6845d16b78c3f6855eef5716afa3f795f725476c7daf05 CVE-2024-32731,0,0,69cb7dd2c9b2dd11f893852362754456797fadd3be950b10a4aa67de88f5cb27,2024-11-21T09:15:35.287000 CVE-2024-32732,0,0,52cb043e11dc5d6bcfedfedcc2978122d5beaf4375ea4697ff329f5b800261b1,2024-12-10T01:15:05.130000 CVE-2024-32733,0,0,5597a6e2c7884a2a3a07513fd6db9896548f5937bc0cc925de3838f3927d04fb,2024-11-21T09:15:35.440000 -CVE-2024-32735,0,0,e1c08764f84c170f6816869f2f759e0ed4cfc5599ca4087c587451b5feee6e06,2024-11-21T09:15:35.573000 -CVE-2024-32736,0,0,9be55e82b806a2c15562551fb45437b04011845c606f2a560c30265f89d3be5d,2025-03-25T19:15:42.990000 -CVE-2024-32737,0,0,9f84ee31bd39c45687d044b04a0474cb522f6da087c8e90573108bbe1000b765,2024-11-21T09:15:35.857000 -CVE-2024-32738,0,0,9babaef76d131ec0489cca937683bdd1de417909e78ce9ae324f0b26c19149a0,2024-11-21T09:15:36 -CVE-2024-32739,0,0,e998fd6c679fc8dbfba5f8b73eb0b0f1c8caa3c846181c87a9a3b610585b23c7,2025-03-28T19:15:21.600000 +CVE-2024-32735,0,1,942223c0abf1a5f70fadc40144dcf7c0cd6a00b2b31d0b09af42d049c2df083b,2025-10-23T12:13:36.923000 +CVE-2024-32736,0,1,467e08433601f293d2244b2e84694ce479d861acbe189dc819a16f81e5ad51fb,2025-10-23T12:14:01.773000 +CVE-2024-32737,0,1,f9031c7a09db51dcd7b41c0f2d693cb6d3c7a47b4ec38a1a7114534f63c32d2f,2025-10-23T12:14:21.957000 +CVE-2024-32738,0,1,8ef31b1feb59fed4a2faada18f7549d02bcc45bba4a4289d66e7e07f44224999,2025-10-23T12:14:57.700000 +CVE-2024-32739,0,1,8a513f0d4dca72b9a567a59679e37c3c5c8a8445bf14333f196092be1cd3b4a4,2025-10-23T12:15:13.847000 CVE-2024-3274,0,0,68892366610151a79b130fd08653d2d72fff8696d856dca1fa825617eac0a641,2024-11-21T09:29:17.900000 CVE-2024-32740,0,0,bfd3f1b9e311212f4f45fad71c0c1846f0aacf5f017c26a21a2321a1d744b6aa,2025-08-20T18:09:35.933000 CVE-2024-32741,0,0,fb204e9f498caab505c80bd18a14a5a3f063ac86dbdc035759d3f56f09271ac3,2025-08-26T20:16:23.190000 @@ -261763,7 +261764,7 @@ CVE-2024-33000,0,0,d0e838ba171750e3dd68b72d1943ad9a489b3d26cf99a8e2920acaa777008 CVE-2024-33001,0,0,c8517307e4a2fe0de658fdf748b66ea42fb0bfce716df6c01db2cf511db1049d,2024-11-21T09:16:12.457000 CVE-2024-33002,0,0,a71bf519cf289b951f3673b97687e93c82699cd34dbacb38ade373dd36724176,2024-11-21T09:16:12.620000 CVE-2024-33003,0,0,3ea3794c75a6ef70ef9eb81a7b783193b310a42f075a35bb519e119ae1360938,2024-09-16T16:22:07.617000 -CVE-2024-33004,0,0,f92e17ad261ae03dc3c371ba5a6f2d2482ca40a341b59a5a0efd4143057dc4ea,2024-11-21T09:16:12.917000 +CVE-2024-33004,0,1,3a1d8b39d1fdebe7c20ef3d40911244714ba251451eb17ad8ce520d3d8a7fdcd,2025-10-23T12:21:52.390000 CVE-2024-33005,0,0,fa867472cf872d3479ec01b2ec9026346c0653a25b04162888e00fbd82bf9d57,2024-09-12T14:39:03.480000 CVE-2024-33006,0,0,24949807d482ba1986c7f8c50b66da329641484dcbc1d26260f29bb918cc5b7a,2024-11-21T09:16:13.160000 CVE-2024-33007,0,0,311a066cd33f0dbb8513fa2bf0208a0073a11727e7f1b00e2bcbf785d83dd190,2024-11-21T09:16:13.297000 @@ -264343,7 +264344,7 @@ CVE-2024-36352,0,0,dd3b8b20e4460b4c379efe60cbe69bb636fd076026c56c0b36ac54c8babe2 CVE-2024-36353,0,0,1af8f9cf0a2bf5897d9d7a859b34ebfb3c17de02c780622a58c0a0ff9bce7d48,2025-09-25T20:15:33.850000 CVE-2024-36354,0,0,4c83ce9806b09ad22d5709903e2e4ab3b1a1cce919e527db7f475fc26a3fd442,2025-09-23T22:15:33.817000 CVE-2024-36357,0,0,1a963f2555d54e0d0a091c3a0819bba9722c22140a1bda4bf1ffce471a910ce8,2025-07-10T13:19:18.800000 -CVE-2024-36358,0,0,81b5623d6ec0aba632ed9ccbd9cbbeee602466b9c8b47e22ca90ce67f15c6d23,2025-03-13T14:15:26.933000 +CVE-2024-36358,0,1,16eef72ee4828f6053caab440f4cf52fb163596fa340d6d8158cc91922122994,2025-10-23T12:26:12.277000 CVE-2024-36359,0,0,681447f14a7123230c23ae85426c8aaf48135d70ce8470eeb85fe0cc08ab2eb1,2025-03-18T16:15:21.627000 CVE-2024-3636,0,0,7998201ae43ad31a3690128e467b0e5b28dee8679cc095cec217932ed4c04872,2025-06-06T16:15:59.430000 CVE-2024-36360,0,0,98643c3072e9d590b4c751843f231fe3cbac85b5add3945e111d686ffb57c7ef,2025-03-14T15:15:41.037000 @@ -268730,12 +268731,12 @@ CVE-2024-41975,0,0,e4393d8c9c5c76c4fbe56e8f717e8f7fa76dcfa090c30100815432ddc4731 CVE-2024-41976,0,0,f8b19c02d108c2efe1d1ed401da5afe56ace8fd66d8eeddc91dea5ff2017c891,2024-08-23T18:40:16.173000 CVE-2024-41977,0,0,e19ff7a98e8eabdef3aae087b2686fed5e6936d4bc074b253e276f488c80402e,2024-08-23T18:39:13.990000 CVE-2024-41978,0,0,723389e61d01e198249e5575d29386b8bd5defd3fd47f1e14f8d09063bbeea65,2024-08-23T18:34:36.283000 -CVE-2024-41979,0,0,3696aad161302cc2d62fde2bf6ab829e62c4c99cf845ea04e040b1a91180669e,2025-08-12T14:25:33.177000 +CVE-2024-41979,0,1,4b7b777c89288db27ed1dcbffb63198ff130952365361ee90f50b7f9c084af41,2025-10-23T13:46:01.183000 CVE-2024-4198,0,0,7a7485a5abe64f1fa00bf3f298ee91f8eced66e084fd7d24f825fd421b3177eb,2025-05-12T13:45:11.420000 -CVE-2024-41980,0,0,b673dc5539f98ed714d7db36f4c3ed3f1f9ae39bb1c82ffd31bfbb9e1643ce71,2025-08-12T14:25:33.177000 +CVE-2024-41980,0,1,af5c49d3f673d603314129f0cbd4882ec1b546ae66375ba7805cbf65725be4d9,2025-10-23T13:42:03.453000 CVE-2024-41981,0,0,d010dad2a282740f6243264e8ceb160028b7244cb116e3b2567c41ae817e0293,2024-12-10T14:30:39.670000 -CVE-2024-41982,0,0,fb3f14bd7b18008bfeb09f197153483393bd9625c84f99b235ab18e40c435dd6,2025-08-12T14:25:33.177000 -CVE-2024-41983,0,0,69dc54c89178faae30c17bd58c91260a95945fcc531dd6ffef96f5ed2e992ac8,2025-08-12T14:25:33.177000 +CVE-2024-41982,0,1,b4c89f0724d46b6abc56433c862a8ffe4951d2a4abbeb53ed858c9e14fb7177c,2025-10-23T13:27:35.803000 +CVE-2024-41983,0,1,9fbf5cb66777a5c4413d1e460445262e158761de5d49b7062c6cd51c50a1f7a9,2025-10-23T13:26:58.567000 CVE-2024-41984,0,0,cc28dded9423fca6aad832556304fd932e6237e054e63ac95dab64232db45075,2025-10-22T18:29:39.563000 CVE-2024-41985,0,0,1933d3c4c1d38613035bb4801598122cfba5ddd2abe3fb2d98987d2c4c11cff9,2025-10-22T18:30:52.250000 CVE-2024-41986,0,0,13cb4263302496795a3baff68ce75377ce468bca317a04ec0b3d33e1564214d2,2025-10-22T18:33:23.943000 @@ -273604,7 +273605,7 @@ CVE-2024-48213,0,0,537ddd215495f7eef0402d4c28a6590445f4494c58306c2787dffae98222e CVE-2024-48214,0,0,f6dcca8fbeafe72e9257f6349ef5b278e653bc01b8d95097172739da72d33926,2024-11-01T12:57:03.417000 CVE-2024-48217,0,0,ac6070943b51d909d3b9b230724dba1ce2e372e902286213bb4f3d7cb1e08e39,2024-11-05T15:35:16.353000 CVE-2024-48218,0,0,8bb649b573a776dd7fcbef7542dd4dd8104062fb77f8e53a2f653f58e0df8787,2024-10-31T15:44:18.777000 -CVE-2024-4822,0,0,04f7ce78e073464eb8e8475be70005149f47a870ac4dfe60ddc99a227d29991d,2024-11-21T09:43:41.713000 +CVE-2024-4822,0,1,a50982417ca5e70770c2c5351796930fe56d9726f63ae345fc66e4fdd9bd5ade,2025-10-23T12:26:55.400000 CVE-2024-48222,0,0,e3132a6f3627cba367cd69bbb044114f788d0ed78fba5e08f593307944db09ee,2024-10-31T15:44:22.123000 CVE-2024-48223,0,0,fb5cea748ce22f8a56c189d7084c19491a4997ab20829b804dedb005481264cc,2024-10-31T15:44:25.177000 CVE-2024-48224,0,0,3bde62d3564470d94f47952655096096272b2c29ad34a2b57639c2bee8676911,2024-10-31T15:32:45.133000 @@ -273613,7 +273614,7 @@ CVE-2024-48226,0,0,7b5c8b23d52f929b13245a15fb1a5ef3f9829f2f71ca0aa283f9572db3742 CVE-2024-48227,0,0,7faf356b350dc38fb0b35229e5b925245f71f461da25edc8ab8307d84e45486c,2024-10-31T15:48:19.927000 CVE-2024-48228,0,0,f5363f135c1516d4db94a0a5fcc6a852f8689ac7001c3b01cae0d7e373b401d6,2025-06-10T18:46:12.453000 CVE-2024-48229,0,0,753695ef497a3b33ba510b0cc1abbfd97d1734ff029994a01afd3f86eaa36f6f,2024-10-31T15:49:11.533000 -CVE-2024-4823,0,0,7a94f4e2979011f7645f376909dacda84ba52f8c331da75e2c621bf9b82d3a17,2024-11-21T09:43:41.830000 +CVE-2024-4823,0,1,03d40c490488f6e4988b8a68491c4730a198e3b1304c83144cd4bd2ee8084559,2025-10-23T12:27:00.927000 CVE-2024-48230,0,0,b4098c1a1922ed9aedd74b2197ce0761cd26e416d9d284b7a22c6f89401cf374,2024-10-31T15:57:23.693000 CVE-2024-48231,0,0,b5293a7d07a11178cd414bf3d7963150b4062c9936cf95fe0229c0281e923474,2025-06-10T18:57:51.190000 CVE-2024-48232,0,0,71233db0111dbb127ee706c07a256ba7ea030cb076543bf9ee9e29bc1dea1e2b,2025-07-07T17:33:49.187000 @@ -273624,7 +273625,7 @@ CVE-2024-48236,0,0,a306ae3290005fe8c7b91f3ff664955626ec01038296445d678f9b7fd1f4c CVE-2024-48237,0,0,0c77a24001e55d3115e663aa0aaa2117eada9184bbe35e280e7227bad6fdf476,2025-04-17T19:00:36.363000 CVE-2024-48238,0,0,369469fb90866b16e049137a96b36fde2d8ada2e645c31012efe26d150a3ca76,2025-04-17T18:59:35.273000 CVE-2024-48239,0,0,150999466b9913bb39d725025f345b709775b852cf8ae7b1e5357c6269e9f116,2025-04-17T18:56:59.167000 -CVE-2024-4824,0,0,99e5c25e3efbae2d6155cb78a769b081c4e63979dfca195378dce1a55688edc2,2024-11-21T09:43:41.940000 +CVE-2024-4824,0,1,cf5d83b4907b3f805d0d3b4f92d6d9154ed74896cf24d7ad963ed50849de2d29,2025-10-23T12:27:05.607000 CVE-2024-48241,0,0,117d0e0a3ba0b329464213b66039261a0e77180dc4e5934e73fdd19266cb9118,2025-06-13T00:24:27.273000 CVE-2024-48245,0,0,24922a2d7e07e6658bda8116d06f7d7a042d2aff2acd1eb5bf13301caf6d9893,2025-05-14T16:06:12.270000 CVE-2024-48246,0,0,9e54d8ae569997b2da7f9b0bd6618b2d7111ed51e20372574de285e89a2b6c23,2025-05-21T15:34:19.317000 @@ -276904,7 +276905,7 @@ CVE-2024-52557,0,0,6ce05dee6e45359091a7949c2c53f3e0cf7895a764b2bab21f1aef86a366e CVE-2024-52558,0,0,862aa816f99d7d175aef88936bc531a11569a19b5f814c5d7b923875345c7e2f,2024-12-06T18:15:26.007000 CVE-2024-52559,0,0,414465d304f9a05af33a66f0a93031b4eae8f1681747279d684e9aa3cbe879f9,2025-10-01T20:17:16.753000 CVE-2024-5256,0,0,351ec0133ebd6057956e3a32f156ca3c6d3a5e82f4f6d83d2ed56c2cf43e8b33,2024-11-21T09:47:17.300000 -CVE-2024-52560,0,0,17f5696064cc8a54449a3e1cfd601a790042146971352f114ead14ce71af8bb4,2025-02-27T03:15:10.573000 +CVE-2024-52560,0,1,c84338dcae79e369ae593f39608b257a0a3402f6c90c635a2788591b6d71d3e8,2025-10-23T13:05:38.517000 CVE-2024-52561,0,0,db29843b8cd0c0b2f64a3115d9a34fdb9af5fe0a1d60da372019346a404d19f6,2025-07-02T14:53:50.180000 CVE-2024-52564,0,0,082fb97e963e24eeaf48108489383b26257575861650145a72a41c8a27e90eeb,2024-12-05T10:31:40.663000 CVE-2024-52565,0,0,02d8cf9601a79a81a90ae9c5bdc3d5a4c9c0865f4264720b000e5fe215f3cc2e,2024-12-10T14:30:45.133000 @@ -278394,7 +278395,7 @@ CVE-2024-54452,0,0,30db43977a4bb0060f4301184eef5e7e4316f5a66e91aba57b8474d2cdaf0 CVE-2024-54453,0,0,4b38818ec57830d6d15331deb8fc6306f0e91d48c89fb133c6569d5b7d3ea04e,2024-12-31T19:15:47.147000 CVE-2024-54454,0,0,d67e1bf29a3aaa483b825ac163d62022e2785b5de9b64863f3bc27235cd67fc7,2024-12-31T19:15:47.310000 CVE-2024-54455,0,0,0db3b980dbf435db06336de7517c496c54b3a7c7d8a5896a3e63ec9aadffe636,2025-10-16T17:05:29.440000 -CVE-2024-54456,0,0,3fd3ebd2b4a02998a1bd7b1d47d1b9851b4563efaf8111417b0111d4c2f11a6d,2025-02-27T03:15:10.667000 +CVE-2024-54456,0,1,cf96bbd0762f640214bf0a7f60567b3d9d4f0cf3c705eedfecdffd8170760187,2025-10-23T13:05:11.067000 CVE-2024-54457,0,0,da0353a7ec7d859fd477580e7c54e31a24aeea86ab2c2ac2e00b7a1eda59c2cf,2024-12-18T07:15:08.377000 CVE-2024-54458,0,0,6b5f215377437d43103a07a37d401d4ffde3d81a5c784753ce0cb90e17b3bbb8,2025-05-02T07:15:57.417000 CVE-2024-54460,0,0,501db1332a4d17c139410325564664dfc73f4e99d059e4235d95a0f042cf4368,2025-10-01T20:17:24.133000 @@ -278722,14 +278723,14 @@ CVE-2024-55225,0,0,aa7f665955b96ed2cbd70ba2cfe61890c11030b7d2f28a07cecdb4283c2e1 CVE-2024-55226,0,0,2184a511f5fa598eaf49595f4bed9dee3850ea43fc9f9e2d10c37fc1da060f57,2025-06-24T14:01:15.197000 CVE-2024-55227,0,0,ea2a0123939f9b1ea5315d2e571a3cfd2a2b9c563e7d434bfdd1e42b71dd3252,2025-02-19T20:15:35.497000 CVE-2024-55228,0,0,eecb7530d030d8ee385f7f9d91b0f88ebc1f92238de3682fd2d3a79e15c4889f,2025-02-19T20:15:35.670000 -CVE-2024-5523,0,0,76176967d6695764c5b1b9697befd8c746836bf407410f62c5542146bc844074,2024-11-21T09:47:51.940000 +CVE-2024-5523,0,1,4214d5651cdc987632aaa359638c446b46b041a729c3cfee91e6902b96e67975,2025-10-23T12:27:58.420000 CVE-2024-55231,0,0,0f2879a830bf65ca740c9104d0f5b7cf06ebbf48cb12754d4e2775c0b62dda8b,2025-03-27T16:30:14.617000 CVE-2024-55232,0,0,0ca7947c8f20ab530f6ef9f382dd1a93ea84b85960cc7132226746574ebf3ddb,2025-03-28T16:21:59.560000 CVE-2024-55238,0,0,e0c3f3f0edd86cedb7caf4b9cc2895dcae6c0756149f4b2b99bfc5803b2e5317,2025-04-24T12:47:25.673000 CVE-2024-55239,0,0,b3828ed8a51e1458ae86aaa2eb4bd9357657b42631a24a67ad7199e81b30106e,2025-07-03T00:29:26.553000 -CVE-2024-5524,0,0,092ba6648acdc0b947fe4537e248ff55e32e95f8b1a7800932d8b118de453766,2024-11-21T09:47:52.060000 +CVE-2024-5524,0,1,53a48a37a580e0ba06996ca67894bd619abcfa0e0923fd7a48034c755bf099e2,2025-10-23T12:23:10.210000 CVE-2024-55241,0,0,187ea8b2ce4e3d344bad396027a912baec6f3e2b9e5b42839c08917307b0c3f3,2025-02-11T15:15:18.593000 -CVE-2024-5525,0,0,0110525ce925ec3053b98fc08c58bae4037cfecab52ce0ff9b5300c0bb11b048,2024-11-21T09:47:52.173000 +CVE-2024-5525,0,1,54c7f4cd3a613e1c4cd308d59cdfbdcc8fa59c7e52b9547ebeadb0eec2988280,2025-10-23T12:24:36.847000 CVE-2024-5526,0,0,0c9c91db78cbdd3ff4ee3a189e439a311e3e6928df326db13557ea657472d9b7,2024-11-21T09:47:52.290000 CVE-2024-55268,0,0,5f3c37cf8158a1c44928734f909dc42c1030ecc39541485d8d944019f4ad558f,2024-12-11T17:15:20.920000 CVE-2024-5527,0,0,d332540fc72a82323997817d4e967456b7cfd92130ba717f37312bb67a51dc8a,2024-08-16T20:24:34.470000 @@ -280265,7 +280266,7 @@ CVE-2024-57844,0,0,d31f5f6257d5b830c29eacdccb00c02babfda60186282b475535b538b6177 CVE-2024-57849,0,0,82ffdfe3bd089955342afa81703e9f29b3c40e8826573faf760584e0fcdee034,2025-09-26T20:19:59.767000 CVE-2024-5785,0,0,0e9b551c455c61638ce3e7d2f5874ca2c1cf14d589c0a4025501beedb178de88,2024-11-21T09:48:19.780000 CVE-2024-57850,0,0,033bb7e1a47eb8b509ae49523b63795059cb167b6a6e33647a758ec075d53422,2025-10-01T20:17:57.833000 -CVE-2024-57852,0,0,f19b9256fed1d0413199f2e2d33e34b963c2188b7176ee982e4664000d9cf117,2025-02-27T03:15:10.977000 +CVE-2024-57852,0,1,679343e38f0ddd8325230488df72ecde2ed4d24823fb7b2d35eb21f873c3bec0,2025-10-23T13:04:42.310000 CVE-2024-57857,0,0,cf138cc0e0261ec5dcc7660d88841b6035dc2c547d16329422febda9654f9c14,2025-03-24T17:30:34.487000 CVE-2024-5786,0,0,8f234ab6daf42312db402cec6a9780e6a0a03ed9070824749daf6f62affc4884,2024-11-21T09:48:19.897000 CVE-2024-57868,0,0,3780a75210dd81a04d0d5494fdee5dd39d339867eb40dde91259f86cb478ba7e,2025-09-05T14:15:41.480000 @@ -280409,14 +280410,14 @@ CVE-2024-57998,0,0,9a2f5b234a45c1aa14534a8e802d2d77984aa61066a605cc84fb19e78f600 CVE-2024-57999,0,0,e7fa5ddca4736c27db0ad8d50f08fcd68766a710317c48d5881566d7ef301deb,2025-02-27T02:15:13.930000 CVE-2024-5800,0,0,ee30c93c9e24a52f4a9c5cf5ce5afed2bf419d548311799a41776eadbe274015,2024-08-12T13:41:36.517000 CVE-2024-58000,0,0,5f105536bb56277a7d83d81335424f733d140e023891ee7eec23c4f28837b558,2025-02-27T02:15:14.033000 -CVE-2024-58001,0,0,45ec576af22f9ec78bffc6338d5785b2571cedf5a7ebe71bb3b6ca208b701584,2025-03-13T13:15:43.413000 +CVE-2024-58001,0,1,603617fd35c00b6592e6a004de53c2efebb6615500bb47861470fe63931482a0,2025-10-23T13:05:00.193000 CVE-2024-58002,0,0,978ec0ef64ae9974f5464f68edf132089d15cd334fb86b728bb8a6855786754b,2025-03-13T13:15:43.530000 -CVE-2024-58003,0,0,a8ce4012883eb872902e7fcc6963e50daf950b3a6e45b1c9ea8a76973861a763,2025-02-27T03:15:11.277000 -CVE-2024-58004,0,0,0682d94a03d803f846c4d3ac83d38ab28866c7c5726895093f3c5a114f1ff8ae,2025-02-27T03:15:11.380000 +CVE-2024-58003,0,1,57a079ac74254346bb1e28c5f7dcba9742c49ac8e6b06ec5a01cfb1b0a5a55e2,2025-10-23T13:04:16.960000 +CVE-2024-58004,0,1,1e046ec87496760609be4a2ce604b7f60bb3ab5453c5ff3495dadebc072b1c91,2025-10-23T13:04:24.757000 CVE-2024-58005,0,0,7746edbda53be278fc94c90e5fed8c09c74a6cf663e654d8016640767ec13b15,2025-03-13T13:15:43.680000 -CVE-2024-58006,0,0,202ad1289d3db423313e951a6d9d93c246934b3ab03b269061ae8d4fd97d183e,2025-02-27T03:15:11.583000 +CVE-2024-58006,0,1,af8f340f13824fab90eb6d278c0ff08c564fdd273a2ad186c8ec2ea7c979bbfa,2025-10-23T13:04:07.040000 CVE-2024-58007,0,0,efd19316a37d967ff567720efa4137a4e3eb1b4286f8dd4ee7ec9e22c3b78266,2025-03-13T13:15:43.833000 -CVE-2024-58008,0,0,8201974c431159fce436624288a63096ce7993ce6d0a5e508b6ef70f5211a3b0,2025-02-27T03:15:11.780000 +CVE-2024-58008,0,1,2ab0806b47eb4f5e3e718f34ba8a82ee5f0201a9761487ae238fbe9046e45b50,2025-10-23T13:03:58.417000 CVE-2024-58009,0,0,b8e19c5533468aa093faeab999a9815b067b4caecc05a6cb08e6106cee0690b8,2025-10-22T19:39:52.967000 CVE-2024-5801,0,0,88cefa27997e2bcbe21b5c883c0afde76d26ad02906fc919eaea4622c76add0a,2024-08-12T13:41:36.517000 CVE-2024-58010,0,0,0ca83ab3cb5c4fa6837f1aed8e5b983844273805c768bda9ebf55aae25cff809,2025-03-13T13:15:44.120000 @@ -285685,6 +285686,7 @@ CVE-2025-1035,0,0,72fea0a2d80ae07fdc30e5739a98c27b4b9464bbe1b4b8593a6bca9675ecb8 CVE-2025-10351,0,0,0858259c6db4d7f87f2ff09c78144231d284f4d546d0108021994b2f36dc20aa,2025-10-08T19:38:09.863000 CVE-2025-10352,0,0,5d1c472011aa702880d22c20cfd10135da8a1b6eb475365235231f4ea1e99c17,2025-10-08T19:38:09.863000 CVE-2025-10353,0,0,4ffa579663ed9a34d5af1b97f65172e05981d029fd120a5def4ba26f3b1c3d35,2025-10-08T19:38:09.863000 +CVE-2025-10355,1,1,6c3a4828542f1ba37fa6afd012e1a327818b85c70ecda27143cabda74ac211c8,2025-10-23T12:15:29.840000 CVE-2025-10357,0,0,6e4c8265cd3ac8deda243a672d40b39a01cf2d63f123d5ec166e5bed4a23db68,2025-10-14T19:36:29.240000 CVE-2025-10358,0,0,437d3fdfe59e2b7c998f6107ab3c35383ce22149152ceda5215cef337e63e43c,2025-10-02T20:12:32.153000 CVE-2025-10359,0,0,68c293f8f7148f2d52c3b17cbc9bf39ac9e3840de5f10fbe7305097b48d62c34,2025-10-02T20:12:03.467000 @@ -285968,6 +285970,7 @@ CVE-2025-10696,0,0,64b312c2d4afda936d01ce9bbe0ae8bbebd107975418586010ce8345a5c27 CVE-2025-10699,0,0,0431f54d81894cc54e6b8414dd5225427bd632ceb12bcfab02ed306f4c745af6,2025-10-16T15:28:59.610000 CVE-2025-1070,0,0,63c9f6366f7886d6af04d22c614f55b0f42e20f4e6634878d1102f0014dfbfa1,2025-02-13T06:15:22.463000 CVE-2025-10700,0,0,289701006811395807ddacf3d32f4ccc99dc0658d0edcc7d0fc89c8d9a61f902,2025-10-16T15:28:59.610000 +CVE-2025-10705,1,1,43ebd94c94d2f6aa2fba59a65c27925408e563a2e22d824feead67e21d2b3af7,2025-10-23T13:15:38.353000 CVE-2025-10706,0,0,06a6c196328eeb593a51cf62a2a92a1600240d302bc11b8f2afc76d7beb317c3,2025-10-16T15:28:59.610000 CVE-2025-10707,0,0,fe31c0f51213aa4eeb4c9fb8571ba361ea2fc7ffaadb9cffbeeefeafeaa8a1ce,2025-10-02T19:40:17.363000 CVE-2025-10708,0,0,c7d29b474ab769e34ef4190851e8d4dfadece6ca75425e4f3fbab853d3c8f25e,2025-10-03T17:21:57.357000 @@ -286211,6 +286214,7 @@ CVE-2025-11019,0,0,066160afe1f6663c935d5795f8f74c4afd5ee4570964e379d8e7f5fe0ebbd CVE-2025-1102,0,0,0a58fac809cb082841f9122cd183bbcaae0c3230347602227d2b0c09eb06daa2,2025-02-12T14:15:31.943000 CVE-2025-11020,0,0,3ab673aeb3c468dd0bed703867cbc3aff35f3041dff84a0f7d2609a2cf91ca20,2025-10-02T19:11:46.753000 CVE-2025-11021,0,0,b0cf04deeec2ba7346603795a7a3fc40f7ce173e00bc9becbbe40c701757d8e3,2025-10-15T21:15:32.820000 +CVE-2025-11023,1,1,a3100bc92b6f76dfc9ee8c2a240b23bdd4768888747fb3ef7a84d75a32d47b3d,2025-10-23T13:15:44.173000 CVE-2025-11025,0,0,f3276fe94d07d47ffee93b64b3a9b4e2b0092ef1edcf638f6779726c2b526589,2025-09-26T14:32:19.853000 CVE-2025-11026,0,0,ea0f3fe6b26cbedffd9b9f222ef7d8819bf3df2bb4de5eddf00d118e77051069,2025-10-08T20:22:33.550000 CVE-2025-11027,0,0,0573942002ea1ee0bce172f0d66d1f10a94b4f0f937e8c98d19da91d01d473b2,2025-10-07T18:56:32.127000 @@ -286311,6 +286315,7 @@ CVE-2025-11123,0,0,0c8bd8ed03b8d8d1b5d1300688e46f14481176e5cdfbe72e6985890f01d77 CVE-2025-11124,0,0,46fab73eb7431a88a4a84ba76ba8e312e1ea7487d72a563a5f8df99333d4ec11,2025-10-03T13:48:38.657000 CVE-2025-11125,0,0,6973583d6f20f66166ba9ce299551597274fe9a6dd3d52c18e18a930ff240492,2025-09-29T19:34:10.030000 CVE-2025-11126,0,0,62ded5afadd07df14ad57e65eb623eef649fd6b8c10777fe19f523cd8aa638de,2025-09-29T19:34:10.030000 +CVE-2025-11128,1,1,59ae221f34cfe5a9bf83c038ca123a5a07d21c756a55a6c66157a1a5e4634c85,2025-10-23T13:15:44.717000 CVE-2025-1113,0,0,e5f8c788cf368398c9beeca18f9ddf681684f5123ecd1fcada0a1cd88526889e,2025-08-21T20:29:15.170000 CVE-2025-11130,0,0,e4fb16b8132c378b40de8c68972d189abf355a56419494e7964e70955aa3840f,2025-09-29T19:34:10.030000 CVE-2025-11134,0,0,2029f9216d643e10ceb0c2c08f1276fcc04d82872d6d19b3d6748aa627636d9e,2025-09-29T19:34:10.030000 @@ -286877,7 +286882,7 @@ CVE-2025-1208,0,0,7d439f27be25af068ee7a5bdbb340ddd01d136ca5376da5fb603abe97482c2 CVE-2025-1209,0,0,73163c928794f026d7174c939dfacce9c8a62bab67c5de9237fcf3ce185d0ff4,2025-02-19T19:04:43.770000 CVE-2025-1210,0,0,51f4cbb43c759e53b163b7aede54aac4df773ce5b490d7dce07597fb52fb1a4c,2025-02-19T19:03:10.870000 CVE-2025-12104,0,0,242041a7d4a4ebf540a2bd3935353b26538638936d45032b2d26aec818286980,2025-10-23T04:15:52 -CVE-2025-12105,1,1,f93b96d9e6a5793d7d19cd1675f5e132a97f23da8c9989a5d0701b852d0fb566,2025-10-23T10:15:32.043000 +CVE-2025-12105,0,0,f93b96d9e6a5793d7d19cd1675f5e132a97f23da8c9989a5d0701b852d0fb566,2025-10-23T10:15:32.043000 CVE-2025-1211,0,0,ed333afb6325a084c131f00ee087aa14b3435cac8d955152c6875f0fc0fc0275,2025-03-16T13:15:36.813000 CVE-2025-1212,0,0,3abd957af5194f62a619834352f61a49a30dbfb280f60a8147027e5362c8c4a2,2025-08-06T18:48:33.517000 CVE-2025-1213,0,0,09a6a70ca5cef42504b01e1673b93239bee3ac66032d2bec5ee9ff5bd8cae38d,2025-10-17T15:18:14.670000 @@ -288265,19 +288270,19 @@ CVE-2025-21040,0,0,a90f672c8f95adb36c595680ce576ce3638dd8ad075391167efbc044393db CVE-2025-21041,0,0,59ad10c3f1f18d7dc2dd235a7358acebba862398fa8e970943f9c335a9cf11f6,2025-09-19T20:13:14.480000 CVE-2025-21042,0,0,bee8f234ab97386bb08da9a2b0bd14f8212a9d126dae263e80a0db226342b192,2025-09-19T20:12:59.913000 CVE-2025-21043,0,0,74e5ebbc51213150c8cebf9c898d9bbfde820689f54e7b07b4c7e75696497419,2025-10-21T23:16:48.313000 -CVE-2025-21044,0,0,e7d3c8f552a0e3db4f2c96a98dfc3fca9a510256e6fdd0dfd0f4a20af958d4f6,2025-10-14T19:37:28.107000 +CVE-2025-21044,0,1,037aa7d372ca428d17c4d3cef6c2bd6d2985475fbb8ebe5e1ae18188b906a929,2025-10-23T12:43:38.350000 CVE-2025-21045,0,0,fff159406dd61ffb7069a67787553a0a3b4c4840d25660f79816f7912037704d,2025-10-14T19:37:28.107000 -CVE-2025-21046,0,0,837cbcf00f0c3919a66c9a6e04f9f711287dd55ddcac52f4bd10aac882dd2c6e,2025-10-14T19:37:28.107000 -CVE-2025-21047,0,0,b1f716512daff3c372d0034293e38bda01e799f7ff9bd5eabf8dad0353f25395,2025-10-14T19:37:28.107000 -CVE-2025-21048,0,0,e1a3dda53905a8eb2b37396e81973d3d3756cd4f4efd39f7cd59fd1ac9549d77,2025-10-14T19:37:28.107000 -CVE-2025-21049,0,0,ca33d44d4bec2295d195b9d2fa61f92ee335f802cc7ccf702c543a75b1491d15,2025-10-14T19:37:28.107000 +CVE-2025-21046,0,1,2b0d23127641b1a4b2e8d83382ad810c97c56d97a5f45d1d7a9c748b3ccdaacc,2025-10-23T12:43:45.953000 +CVE-2025-21047,0,1,ff3c6a71b07c44a2bdda416db38d4b193671aa41e917c1580f4244b197642ceb,2025-10-23T12:43:14.327000 +CVE-2025-21048,0,1,36a07b66c00c41dc4584cbee42cbc409cd7fd4b8b4c83fb68afb774c106a8c6e,2025-10-23T12:42:48.040000 +CVE-2025-21049,0,1,29636e65255a4ed174486b0fc32c87c72e052e0157be0573ae0fbb3ab839b2bb,2025-10-23T12:42:21.107000 CVE-2025-2105,0,0,86a2f2a62740f9d33a0370c8c78870c61b92111e76ff8ac2dd52910a1bc1dd76,2025-05-06T16:25:44.413000 -CVE-2025-21050,0,0,83c186e6e05d9826fb2647652b8e1a305612b7495de3068e536eb3f57763472d,2025-10-14T19:37:28.107000 -CVE-2025-21051,0,0,c7337ab984a658bb3cf8e6caf05c55e5612ed29437db516f118de6abe82a6303,2025-10-14T19:37:28.107000 -CVE-2025-21052,0,0,cc853d1cac0a61ad784f543b8e9c3d1eef766215d4322c290827feea756727f7,2025-10-14T19:37:28.107000 -CVE-2025-21053,0,0,2480bb668b5217a3193cbb819d95adcd290d5f12d67dbc1d3f4184197da3fce0,2025-10-14T19:37:28.107000 -CVE-2025-21054,0,0,12943466849642736084f1fdbf0eb9351e61345ae067b3817a21cf297ae936fd,2025-10-14T19:37:28.107000 -CVE-2025-21055,0,0,0df6811f006e9f5e7352fb7f53b07fc84084c3966377290bc8ee6f7815249dc3,2025-10-14T19:37:28.107000 +CVE-2025-21050,0,1,fcac279fc35f27f0a37b3b067a71a32bd314d6ffd5d5745fef1bd0ef9634d4a2,2025-10-23T12:42:56.973000 +CVE-2025-21051,0,1,12deb062f9ac0444b2664b6cf64717db7f996f8a6ab1e06b458c4bda5197a0a4,2025-10-23T12:42:04.237000 +CVE-2025-21052,0,1,d0f7fa2e2ec39b285aa7275056437a979ee04d96a9d858add40ee7b0a0606af4,2025-10-23T12:41:53.497000 +CVE-2025-21053,0,1,312dacca8c8c7c7247b34fcd9bb637ce14bb4509293523f79040da7c1a756fc3,2025-10-23T12:41:45.040000 +CVE-2025-21054,0,1,060a2fe030e7d432ea24e99efd1e05d30a43048818e4bb888a88857f243fb2ff,2025-10-23T12:41:25.633000 +CVE-2025-21055,0,1,51768053b6beaa0604c7ea8375c15951dd3b697e083ac15761e49196b67450dd,2025-10-23T12:40:20.293000 CVE-2025-21056,0,0,6a4aaa5b749814b2564b0f46ce4f8866c765af9a4bd6c1cb2523f239d8620241,2025-09-26T14:32:53.583000 CVE-2025-21057,0,0,dff9ad9e3d64bf3716a1ac8215c5f5e763699f9aaf367d4430ffae993bef8144,2025-10-20T18:42:06.587000 CVE-2025-21058,0,0,19f83389b321a0728273f21808d181ca27f7ab1ee23935f5ee87b91d926427a1,2025-10-14T19:37:28.107000 @@ -288944,27 +288949,27 @@ CVE-2025-21709,0,0,a14e7b079991c2dff834a4c134806b146fad3426c8ee00bb7e36d413c6c5e CVE-2025-2171,0,0,e14a8a14874b8037edc00c41fc9d48911380d12ac3fd94fb44f87696188cc9c5,2025-06-23T20:16:21.633000 CVE-2025-21710,0,0,7d577fdeeae7df2e8f9e47f3e4aa9e890b8b043c8f557f4e9316ece7be82aa42,2025-02-27T02:15:14.657000 CVE-2025-21711,0,0,e6c14c8d6127b841cd40a6c73bdb0db683cc2793b219532fa0c9bbe5155e4a77,2025-03-13T13:15:49.343000 -CVE-2025-21712,0,0,2be8d4a727b7dc56525c5bbe0eccd2de67a0d51ec13edf6e62a85504ec440f98,2025-03-07T18:15:47.507000 +CVE-2025-21712,0,1,cf8ea2bbfda947ac630d1f0ac203f286dd1944c14a49e6742f98413240b35de5,2025-10-23T13:07:05.597000 CVE-2025-21713,0,0,c1f1a54c0f179966e1bc474a0acd74870a58eff7c789a818408fe8dc2e632d1c,2025-10-01T20:18:22.197000 CVE-2025-21714,0,0,b7c370d9e1faa2a71edec51758237bc3cfd656b05502e54af2c277c6606ac11d,2025-03-24T17:50:26.843000 CVE-2025-21715,0,0,2794ed7e9eaa4be52f61f80ad452b8e69f86802851812786c8f7dfcc9976af57,2025-04-01T18:29:30.707000 CVE-2025-21716,0,0,0af86f8fb1931ccad75166023e65975b15099d1cf5ca295a448f47bd7f4f2628,2025-10-01T21:16:40.873000 -CVE-2025-21717,0,0,75c35fa7fba42e24f73abff9b53b1952419e1ddad8d4143bf10c80475ee6ece3,2025-02-27T02:15:15.373000 +CVE-2025-21717,0,1,26c65320ffde74d020770416bc3ed87deaa8e664ca202f89462eb78f1eedaa66,2025-10-23T13:06:44.987000 CVE-2025-21718,0,0,2520ef1afcdc46478f313a5a92354d6fb20effaff260f2b5b7d82b998895b4eb,2025-03-13T13:15:49.760000 -CVE-2025-21719,0,0,f615c6b22a70cd4a20e7b0424d01a8a7ad6c045d5c2c11aca0dcb25e7b3a77c2,2025-03-13T13:15:49.913000 +CVE-2025-21719,0,1,0114ebd770239d454a1ad7af33aeb8f30b06e6c60870e5dd01370f3d9308edb9,2025-10-23T13:06:58.540000 CVE-2025-2172,0,0,c16e5d3715120fa6c47a3e6ea2faa4766075094df1588b068a547d15c50d0d83,2025-06-23T20:16:21.633000 -CVE-2025-21720,0,0,0a0c8dead69b88fdb48e05feff8e64e2e34f9199f277d44d9b715abac576f042,2025-02-27T02:15:15.683000 -CVE-2025-21721,0,0,cb718b259efff33aef42e06dc10e923ca6afb1c706aa2b3e33501228c041fbd6,2025-03-13T13:15:50.060000 +CVE-2025-21720,0,1,0a9392282a746e892b1ebd8cd40b11bfcdafbf4f262ed45a5db11496fcc74b80,2025-10-23T13:06:19.940000 +CVE-2025-21721,0,1,bfaa010dd756fed5113b291ee34a13ae7ed43d9757db3c16e4af014ff643e79f,2025-10-23T13:06:35.537000 CVE-2025-21722,0,0,072d53056ce905d076e5c84d30643f7bbfa8ee92227d7718c69ee109f330f3e1,2025-03-24T18:27:47.437000 CVE-2025-21723,0,0,f158e47bfb5b9b9d077b070edc0963427924a3f995b4ed1aa73ccdc9bb5376a1,2025-10-01T21:16:41.110000 -CVE-2025-21724,0,0,ffc69114d2836f1884b0c7e27617bd0efe9b2b05798948e0653c098fbe19c202,2025-02-27T02:15:16.113000 -CVE-2025-21725,0,0,0566c664389638a49555cbb862dd9597c3c041a07aef4caf5f04a2f5ce2e600f,2025-02-27T02:15:16.220000 +CVE-2025-21724,0,1,8ca197bf8b4da219b2f7c4ee3c5a02fc5fd26d33f718fd122844ab201fb10f56,2025-10-23T13:06:00.863000 +CVE-2025-21725,0,1,33d5fa40e2910c945d7fc71a821ec7fa8a64dcde7fae00c4f7c07b263d3faa55,2025-10-23T13:06:08.747000 CVE-2025-21726,0,0,ed3545478f2f882176f60e46d8dcb9f24ace27e6441128ee970adcd6a58f683f,2025-03-24T18:58:40.857000 CVE-2025-21727,0,0,8f4a8138dbd0e79bf26ac968e7989b7025e15fd9bf293458c27910d63a6eb49c,2025-03-24T18:58:02.740000 -CVE-2025-21728,0,0,c251bff47b0540a1892ca35c52f560ad0f44617028e87e5f6f1d3f968a1f3aa6,2025-03-13T13:15:50.850000 +CVE-2025-21728,0,1,f879bca48c649d7d8d5edc040b55fd0a8befa2a18dc916be1ffe53e5bf56487b,2025-10-23T13:05:52.440000 CVE-2025-21729,0,0,c80b2b4297c876cf520c38a4cae0fc24e48aa8fc496df0acf7299bc355ab8a46,2025-03-24T18:57:27.730000 CVE-2025-2173,0,0,7470b586ae939e61a7af5b5a10de6dcd996b5ca18194c5a5495fb5f8629aee0b,2025-10-03T00:26:28.397000 -CVE-2025-21730,0,0,d43aa4affa9fc91e45d56bfc5cc8f5737a9d303f60be429fe7c2e8fbe3b8a9e3,2025-02-27T02:15:16.733000 +CVE-2025-21730,0,1,a9d86e2e871017a296e160edd997a85f92743a5092999efb7055d148f2f48b61,2025-10-23T13:05:24.863000 CVE-2025-21731,0,0,517373a1d7ba8b90aa467ebc0cdc1107bbc4beec5ff8663d2daddc700f880d74,2025-03-24T18:56:56.050000 CVE-2025-21732,0,0,4f8c0aee918472637ddac16b363ffbd3a3ed06383ffac0b747e65e4dc0756262,2025-02-27T03:15:13.820000 CVE-2025-21733,0,0,2169fbddfaa3299480040215746cb4189c541b3386106a8e760ba24d31681988,2025-02-27T03:15:13.923000 @@ -293551,7 +293556,7 @@ CVE-2025-27036,0,0,5477d5448ca3d28f63fe7156bdfe539a6982784445781546b48092e527d37 CVE-2025-27037,0,0,bb68e99d7d792d77783977b22903b1e5d7ed9e296cf893c8751da8573769fb18,2025-09-25T16:07:48.703000 CVE-2025-27038,0,0,a7f4ce7aed5d24f5777f8214c7a6184ccc286cdea9fad9fee4521029d4e6fd5c,2025-10-21T23:16:54.293000 CVE-2025-27039,0,0,5ea0a4b7e47ac11bd040fe0fef49b585d52115b2cd7c054c43ff50e2d86a3396,2025-10-15T19:04:07.410000 -CVE-2025-2704,0,1,777ec835e6102ed1262da54f406772613ea8c18ead01e805780f563b35f92996,2025-10-23T11:15:31.207000 +CVE-2025-2704,0,0,777ec835e6102ed1262da54f406772613ea8c18ead01e805780f563b35f92996,2025-10-23T11:15:31.207000 CVE-2025-27040,0,0,4cf71c88981616b767a789f7e971ee33e4f442289ed92263b48fdfc9be2ca1ef,2025-10-21T16:42:08.180000 CVE-2025-27041,0,0,05e90b89359cf4cf2975c9f0979ba4b7a10fd1bd93d220f49ff71336fe038ef8,2025-10-09T15:50:04.013000 CVE-2025-27042,0,0,d2ba90c8543bcc7f130689a58389071f9ef44119b8e78df44122fd987deb7152,2025-09-25T17:38:53.743000 @@ -300962,7 +300967,7 @@ CVE-2025-4064,0,0,ee26dea304f1441eb24a5c838c03bb86adcc825cdb047c909f24746ff9429a CVE-2025-40640,0,0,0523370e82f60250169abaf62a446ea39065215752a23804476efa635f71ae14,2025-10-14T19:37:28.107000 CVE-2025-40641,0,0,b71673d2a400a55959d0848b6dc5dd380d650279c5deb9da2aea8e7baa1646fa,2025-09-08T16:25:38.810000 CVE-2025-40642,0,0,4b712ef86d7d1ccdcaa378b3bff4257a42bf934e4c0eae62f8f5b1c95e3ebb78,2025-09-08T16:25:38.810000 -CVE-2025-40643,1,1,5f19228d0f0ee4453e9908ae78d2ead764857027bf5601ea34ec7a4b37a665fd,2025-10-23T11:15:31.507000 +CVE-2025-40643,0,0,5f19228d0f0ee4453e9908ae78d2ead764857027bf5601ea34ec7a4b37a665fd,2025-10-23T11:15:31.507000 CVE-2025-40645,0,0,dfba7c4d29cdd90c4bd8cc6fbd9c4dad2e6daaf47adb85f777296671d4f01a1e,2025-10-02T19:11:46.753000 CVE-2025-40646,0,0,86bf03c8909bfa6c78dea80ef4b23d547e99de2b984133c8880f36702673149f,2025-10-10T09:15:36.957000 CVE-2025-40647,0,0,8c0ec55bd140abaca8feb94142ca23568564223566e71dfaa8847639f9b9a450,2025-10-02T19:11:46.753000 @@ -300975,7 +300980,7 @@ CVE-2025-40652,0,0,3ed1e73ca0af4a402b191efa99599865fb897bbf50a3feb00af29861487f2 CVE-2025-40653,0,0,952d6149fd41bb3446d99ef1d9980a07fed39db01b9836f114bc421cd10405d3,2025-05-28T15:01:30.720000 CVE-2025-40654,0,0,0de5cf23feaa5377162724c73f57968710485f846898ee7eb6cb2e15ca4cf8c8,2025-06-12T16:06:39.330000 CVE-2025-40655,0,0,dd1384d98002f650daa28fdcaccc83c2d4faa397ab7ac917b163b73210948d22,2025-06-12T16:06:39.330000 -CVE-2025-40656,0,0,678d1f712f6cea6586ff10e7e20155b457744747121796c5fcafbcb29ff4d2fc,2025-06-12T16:06:39.330000 +CVE-2025-40656,0,1,e2e54683bc3e25cbc17af79eaac53e5467e9a94b49a0803affd29330c4046e74,2025-10-23T13:58:48.240000 CVE-2025-40657,0,0,f3b232612391127409a9a87374c9ea1b87760a19746f3ec537c5290fd16be741,2025-10-22T14:00:13.857000 CVE-2025-40658,0,0,fe5bea20373a886ae9422ad7c60caf3263c802ed2baeecd58efa75ca7dddd48c,2025-10-22T13:56:16.287000 CVE-2025-40659,0,0,e582ef6fbae8b34a420acc00b1dc7c1846f52ba048109ff925c6303549b24423,2025-10-22T13:53:46.343000 @@ -301214,7 +301219,7 @@ CVE-2025-41062,0,0,64db17c186b6ee805014674c3aac4975edc63d045ec0a8c09b3d7adc86f28 CVE-2025-41063,0,0,79b43d2cdd66d456aca18c96965c2b1c7321502ccf29c7ff3a46303eee2a5a5d,2025-09-04T17:50:21.547000 CVE-2025-41064,0,0,dada5fe2bf56285e13cc8b243494c0c9fb617a3915ebcbf7c1bcf45f57888253,2025-10-02T19:11:46.753000 CVE-2025-4107,0,0,80bb7abdec5d37800b07ca68e7dfa10215abe5d87f8e994a47512d482e70dee5,2025-05-08T23:15:53.240000 -CVE-2025-41073,1,1,a718d3070ab3cc0ec7784f384cef50d31b8e0ea61b250d307454752301889757,2025-10-23T11:15:31.653000 +CVE-2025-41073,0,0,a718d3070ab3cc0ec7784f384cef50d31b8e0ea61b250d307454752301889757,2025-10-23T11:15:31.653000 CVE-2025-4108,0,0,99f1be6498bde74cd0dec545c35ee00e799f5fd928071043f07160da085a8dfe,2025-05-13T20:26:29.923000 CVE-2025-41088,0,0,a698df607ad7eb36537373b9ebc438da8e423c2c042811b415b125786dbdeffa,2025-10-14T19:37:28.107000 CVE-2025-41089,0,0,64fb2e05dbeffbbb32f14bfe7bc69babe4ad3b66ee913d55724c1dc167dc256a,2025-10-14T19:37:28.107000 @@ -301581,21 +301586,21 @@ CVE-2025-42908,0,0,c930fcaf81018cf9d54b3fff63dd384b8426d936893761808e24dc60aea28 CVE-2025-42909,0,0,170641f04fb55b139e4516ab135dda1819c62f1b04cbdfbfa06b6ff4f743e9cd,2025-10-14T19:36:29.240000 CVE-2025-4291,0,0,c14cfaf57fa1627aaf885776460fcb960716d0349d2bfa6f58f82d80ff10c3ff,2025-10-03T14:50:51.930000 CVE-2025-42910,0,0,34c5f9f9b0588309f6a61a6fb7e8e538b479251a1f2a5a9b5de347fd74ea25bb,2025-10-14T19:36:29.240000 -CVE-2025-42911,0,0,1f70c7bafcca48c1eac9c5be8a6bd6104b813cbbb68392acce5917fc691955b2,2025-09-09T16:28:43.660000 +CVE-2025-42911,0,1,29cdbf8e02e59f80ab04f37daa67507b6dc8c715f24005e5564ff412208f9a9d,2025-10-23T12:45:48.857000 CVE-2025-42912,0,0,b8759a72e9086cceae8e58186d518327ce1051676e833392bb06171fabd9764d,2025-09-09T16:28:43.660000 CVE-2025-42913,0,0,b8c695889f6984600ddbd302e419640cc4af797cb88feeeebef0085d84ce3695,2025-09-09T16:28:43.660000 CVE-2025-42914,0,0,9054a12c68bf17a13813c750c4d664430a5cecde13f38e8e04da1a963d04ae77,2025-09-09T16:28:43.660000 CVE-2025-42915,0,0,7b41045661f3c5bdf224cc90e15ecb76addebc31aff95f69e80da8f6eda9e519,2025-09-09T16:28:43.660000 CVE-2025-42916,0,0,5928ed4aad1db5377e444c4f64629a30fef8947eaf4ad303d9c05696b4ee5921,2025-09-09T16:28:43.660000 CVE-2025-42917,0,0,ecc797318bb405f3fbd226d0b3fe42053e212de5432deaf50ffb785e14d069be,2025-09-09T16:28:43.660000 -CVE-2025-42918,0,0,cf03ad6f27f6f26c7d88333b6e0e3dd8680c0994ba4a9966d4eacd767e93fcf1,2025-09-09T16:28:43.660000 +CVE-2025-42918,0,1,9624bafa9d9fb9cea9ca2af2d3ab5912684b5263c8806418aa4f01524865a914,2025-10-23T12:44:38.700000 CVE-2025-4292,0,0,3b0e06bfdd97a17ba7f68946a85abe7ce662b331b5db371d423d8c2c22e38a38,2025-06-17T20:17:44 CVE-2025-42920,0,0,abec55522009b094cede550d2cbb256a0f9fc51e50e401fc3e3f1188ebce3e7f,2025-09-09T16:28:43.660000 CVE-2025-42921,0,0,fe45c9bf48d8b64b0cac9604dcc1ad3071452dfd7112cafe12dd9c33c82af017,2025-04-23T15:25:30.927000 CVE-2025-42922,0,0,e49ed894caaa364d70399b0e86e267d332c5f1a01efacb60b7f8917f5d9061d9,2025-09-09T16:28:43.660000 CVE-2025-42923,0,0,676b187fb89c014dc49ca412e7edce43ab0b0154dd9d4d87c62d739b25e52834,2025-09-09T16:28:43.660000 CVE-2025-42925,0,0,5f0f7251950e36b09f4885d2157c93cee214de4cb60fa384fc5458121242b167,2025-09-09T16:28:43.660000 -CVE-2025-42926,0,0,39cc276238f4e923b76280c43df16c73142f5d736efec2e87e1687ddf73efaf8,2025-09-09T16:28:43.660000 +CVE-2025-42926,0,1,f9bbfee08a56cb9d6d25e2ab3a7c5e8ca58c10811e448ecd8fb76d4ac67153f1,2025-10-23T12:43:32.437000 CVE-2025-42927,0,0,861e01a08604680403b4e6415898f99b63ab0ecc247a43911ee007501405e1f8,2025-09-09T16:28:43.660000 CVE-2025-42929,0,0,0133d35244c04282eb96838d84d50d177e5e3122ceb0d2b281b5833741e07691,2025-09-09T16:28:43.660000 CVE-2025-4293,0,0,3e0fba3b11651bbd0f80afc0b87a24c09c8226e80f3350735e023f15e0a509b4,2025-06-17T20:17:29.200000 @@ -301603,7 +301608,7 @@ CVE-2025-42930,0,0,44cef21cdb60a00b3c3211c8d5cc3f270c203dc6dc342a13faf5a194bba60 CVE-2025-42933,0,0,1b8b8834585ebf2c20f9b9b2cb2bbce2b007bb7503226a0611e2dc37ef077482,2025-09-09T16:28:43.660000 CVE-2025-42934,0,0,559c027d61f36dab64700c2a222c89f56b61d8257504ed3afec492573e129e2b,2025-08-12T14:25:33.177000 CVE-2025-42935,0,0,65565fdbd3a23ce6528b8546352fcbd36997e3b4f6997f96b20eec1083a871b5,2025-08-12T14:25:33.177000 -CVE-2025-42936,0,0,78adfe3a71455b7da73b46337a294e944fe74ce961e58638c9df998ca20f930e,2025-08-12T14:25:33.177000 +CVE-2025-42936,0,1,48de4aa148c3535f4bb311413f80347d1cad37519aa58a4799dc141fc862f417,2025-10-23T12:41:58.860000 CVE-2025-42937,0,0,def18b17f889cd786aa416b383c927a087a89ee2e460c8fd35b81b3d6e525146,2025-10-14T19:36:29.240000 CVE-2025-42938,0,0,6d40aa53a0376de9e5cb40287bba7ec6d4d14e126938d259d362c99dd4b86424,2025-09-09T16:28:43.660000 CVE-2025-42939,0,0,93af45be7c64c49d540edeb363c894a508af66fd8cbb2bf097e8a2e3c04c1fc2,2025-10-14T19:36:29.240000 @@ -308743,12 +308748,12 @@ CVE-2025-55091,0,0,da03a00f9b1bcafac8a54aef3e114ef21581f3e0aff8afd4eba502478747a CVE-2025-55092,0,0,6aa82d2d57c2934dbb957b5d857b499e00d99bf9077229dff94b12f17dae997c,2025-10-21T19:31:50.020000 CVE-2025-55093,0,0,ff29e60f92d7b2766a670d5757198340f29ac87eab794bcb4696157b60a7c3a3,2025-10-21T19:31:50.020000 CVE-2025-55094,0,0,b39370c60b5510793e463f3ffd68531e7d67c9ace92f3b4415b50fe834e1764f,2025-10-21T19:31:50.020000 -CVE-2025-55096,0,0,1a950e05bd1a7558e73849d776570f691f74487f92800e488376d664141d68bb,2025-10-21T19:31:50.020000 -CVE-2025-55097,0,0,98551199cf1624a1b1de2d45cb8d3f3e3b54c48a98dd91c68aef0116871bed98,2025-10-21T19:31:50.020000 -CVE-2025-55098,0,0,3054d84aefebb475154fd4da50769ddc2092dcd9c7714c5944187910f47b012e,2025-10-21T19:31:50.020000 -CVE-2025-55099,0,0,0faac5ee7a411f539772b4a6d5685a585e940f5bd5e6d98283d7179d76211e10,2025-10-21T19:31:50.020000 +CVE-2025-55096,0,1,b149c8deec233f741480935bd0183b2b67d2f476b5e274633a3a0e8e59730c13,2025-10-23T12:32:46.373000 +CVE-2025-55097,0,1,e249adabe64e7c4cd38ce3e3c2b6bca0c3fd36e6b671ccea586b089e8e702da2,2025-10-23T12:32:54.340000 +CVE-2025-55098,0,1,9f2bd0392bead2480bab070ebdaef25df5c55c7dd7ec601199f6d02fb45963fa,2025-10-23T12:33:08.293000 +CVE-2025-55099,0,1,a70c99f3628920ccbeed7987afb8fcc199e86840254a4d5fbd0c790da0f585e0,2025-10-23T12:33:01.977000 CVE-2025-5510,0,0,c280b9a0d31671d74b947ff9c05e358df742c594a477ff404e880b43b85ada67,2025-06-09T15:13:41.167000 -CVE-2025-55100,0,0,7eb74dc90defb675d0b6c42bc1cbac6988468a98a36d3509b325757d66572433,2025-10-21T19:31:50.020000 +CVE-2025-55100,0,1,e79656627b1b3bb126e9c15c2f5e4f9df8d62ca80b4c67a67e2721023815fa88,2025-10-23T12:33:27.570000 CVE-2025-55103,0,0,eb54027c858fc53c1f3c3fd26559373c25179d897a1b2fd2398e029d5773bf0a,2025-09-05T15:09:09.497000 CVE-2025-55104,0,0,5d541c32d5c84d2c068c6b920a85ec31ba6a8eacbc6b86be4c4321f6a2783693,2025-09-05T15:10:03.933000 CVE-2025-55105,0,0,0e45673f32e102d58253b52410a2897b021c454dfbf8fbc372d90e017a85e90d,2025-09-05T15:10:54.547000 @@ -309426,7 +309431,7 @@ CVE-2025-5715,0,0,aa8093ab1eb57eaf432c9e2dcd651c0120b8a60858fe181c0e6a3d9f990400 CVE-2025-57150,0,0,f89fb5f427f686e2c4e31bbbc6080025fb55976afaffdc3b472b9cec821268d9,2025-09-04T17:51:46.387000 CVE-2025-57151,0,0,6c29e9caec991ffa628db8373c1e4b4bab099980e58b49bd13ae2412372d2e0a,2025-09-04T17:51:51.447000 CVE-2025-5716,0,0,6a5127e87ccd7451fa359eddd1f1ca976ee41f17387602fe9c45af694962a531,2025-06-10T15:46:32.377000 -CVE-2025-57164,0,0,4fc46d26d5154085c2029f52c668bdfd9d182b1a183a1e4525e2c1b1f339c1f7,2025-10-21T19:31:50.020000 +CVE-2025-57164,0,1,bc54b3df3cfb2e282997d60ce9d52b3d20ac6bdddbe514489103d0b65ab52f31,2025-10-23T12:33:49.467000 CVE-2025-5717,0,0,49ddf9612368c601c5b8ce324541ec4eec327ca937ca58c94c38e829b8a05ed5,2025-09-24T18:11:24.520000 CVE-2025-57174,0,0,930723c8f42d9f06f57ee0e035a59150a8b08254b1808c07a060f172b8a5eb18,2025-09-16T12:49:16.060000 CVE-2025-57176,0,0,60319a7311a29505d83fbc1e218de6dd8c32641d991d276b7df01d66d864207e,2025-09-16T12:49:16.060000 @@ -310849,7 +310854,7 @@ CVE-2025-59433,0,0,8ef68f638d36473031d07218d7bb432ede81cb414bcfda0396d7be24e6918 CVE-2025-59434,0,0,07fc217ac7f693009ee93bb574c25c1f1c30dfaaa4c26c741834e2c375a2a09c,2025-09-22T21:22:16.313000 CVE-2025-59436,0,0,78bf56272b9a60ce0b6c199dc29700584d6f2c9ce09730577f346ae7e1d75569,2025-09-16T12:49:16.060000 CVE-2025-59437,0,0,6926a9bdd1a1ddbd7553ac591e281f6e1611507f5d64ae04c4588fd8ad0d328e,2025-09-16T12:49:16.060000 -CVE-2025-59438,0,0,9d56bf8eef6ce008df61aa45d0b6ff084b24c7b9dcdbde91154eda206bee3f03,2025-10-21T19:31:25.450000 +CVE-2025-59438,0,1,0c310d055ec6657e3095f80d88080efd7311ecc052007060316fec6a455f9de0,2025-10-23T12:35:35.187000 CVE-2025-5944,0,0,3aff21221f6c182b075d2e68531e5fa603d806d1007f82b820c4bf82b3632ec9,2025-07-09T17:52:41.367000 CVE-2025-59447,0,0,40c4ec88233b72828a2739aabdfe0d09450ab34cd921fe2180cd2a49c1f26ba3,2025-10-08T19:38:32.610000 CVE-2025-59448,0,0,8d190b622d20a367549e040b1fd2d0c137b64bcbd1d9183b0c25cd1b76c141b8,2025-10-08T19:38:32.610000 @@ -310892,7 +310897,7 @@ CVE-2025-59531,0,0,1eef2d21e05d677f01dff5f81d12cdbad80d7add819c6a7d2f64dd7371945 CVE-2025-59532,0,0,52c3ecf2212e94a583b85922241f66cf8b089eed8ae28cbf29bda42273d2a58c,2025-09-22T21:22:16.313000 CVE-2025-59534,0,0,afebfd8b47b2762ed44a55f7f6e5ba027fbf4aadbee33bcea08adf433e88e8e9,2025-10-08T17:41:50.037000 CVE-2025-59535,0,0,2843e48afeb5fd386fdc7c01b45899eda15c685854d25530e86d47ed1368ad13,2025-09-29T12:53:14.557000 -CVE-2025-59536,0,0,0bc380fb5cbd88bd71d0caedcbfb8614bfb178f6c27f577133f7e0083e12c009,2025-10-06T14:57:05 +CVE-2025-59536,0,1,b4db6b99771bc0398b874e5239a702b091dc1fb880e8895c2e85f0e9a80de862,2025-10-23T12:46:37.910000 CVE-2025-59537,0,0,90f1a630474aa86b47873a0f950128744822eacc0e6e7e399b0e250d933b7afe,2025-10-07T14:34:45.730000 CVE-2025-59538,0,0,2fe133f18a08b25914015ec80976b6d834c04f93748e84a9ec6b570bd5e571c6,2025-10-07T14:28:49.880000 CVE-2025-59539,0,0,b8a54b599385db945c27806f5b648b0d1f95d485a10fb8295e44faa36ac5bccc,2025-09-29T12:42:58.927000 @@ -311364,20 +311369,20 @@ CVE-2025-60333,0,0,1dc5074546219014cb241e8037bf4d8a013efca85882ca2392eed648c90a3 CVE-2025-60334,0,0,b4e1e67a0264e638abdaa32e6187b519c369ce73110b65698393d875a6421213,2025-10-22T21:12:32.330000 CVE-2025-60335,0,0,5c9f2a6282418605a4272eeec929c73a8bb0c9781f1133378f287fc959f4d451,2025-10-22T21:12:32.330000 CVE-2025-60336,0,0,1facd966731d938e8acd4888d0d0721bc00cedf8734dcf244a2ab8538ceea346,2025-10-22T21:12:32.330000 -CVE-2025-60337,0,0,b664f572daf449095bfd97d7b77301441299ffd391f5002eaff8b6a8dc282384,2025-10-22T21:12:32.330000 -CVE-2025-60338,0,0,fc26caf749f0e2d6cbd2ab8d793a0779013d0ab81825738f3ffdd6c55a543842,2025-10-22T21:12:32.330000 +CVE-2025-60337,0,1,19845eebb68087e9455f784c7256b2b2591125b12971a32fdf65dbee1d1e7f42,2025-10-23T12:30:45.210000 +CVE-2025-60338,0,1,2c23b678c1f314737a63f6a14f5fe81cf1e9dffafc3934967acc1e2822405e6a,2025-10-23T12:30:55.257000 CVE-2025-60339,0,0,8bed6042e20b588516a7665b9cb72e3d165c1e41195323487c2d19582ac455aa,2025-10-22T21:12:32.330000 CVE-2025-6034,0,0,645d376761e780a7051f07bb8e837833b50788f50b325a750375e5c9570a12de,2025-10-07T13:20:48.400000 CVE-2025-60340,0,0,727c7ea3f7efa88d08b6b4ba70db9dee057415ab6cf58b5697e6cfe6b20b78c4,2025-10-22T21:12:32.330000 -CVE-2025-60341,0,0,24eb38933e095d1fe76aa958302f4c1a6f714aae32110428b51095abe3848abe,2025-10-22T21:12:32.330000 -CVE-2025-60342,0,0,d65441b9330a5d7267755ef64995654a8f6646438f25f69a90a2b245a2240aa2,2025-10-22T21:12:32.330000 +CVE-2025-60341,0,1,9bd1e9115babd3d82e617eec5041b06095df7fc697e30ab0f5acf6581d7be289,2025-10-23T12:30:34.360000 +CVE-2025-60342,0,1,c9f5a47789089443d20231f27f0c5053d0be39663d79e78e8589d085f7faa0ff,2025-10-23T12:30:02.370000 CVE-2025-60343,0,0,66bb1b8e83c33f22894299be6c1bac6c30d9a684681cc8fa56b7c673093d4297,2025-10-22T21:12:32.330000 CVE-2025-60344,0,0,99f5b799651478f723ceb704c6cad3634cd4b699187a17351497655d4ec34fb1,2025-10-21T21:15:39.050000 CVE-2025-6035,0,0,9ae3f54ffd6e0326cd0ac0337f3b3629819c1abcc0d51c53e8ec97c569a12d3d,2025-08-21T20:15:48.673000 -CVE-2025-60358,0,0,b72c12e938309b437b1a7268a9f0598fec0842bd4a825e0a41c4fc0636cf0a22,2025-10-21T19:31:50.020000 -CVE-2025-60359,0,0,3aa9421eb8a3b0afb04f7b17a6fb37fe4f85ddf1519a5e644ba987626eb5cfd5,2025-10-21T19:31:50.020000 -CVE-2025-60360,0,0,60a11e6ad3a1c20e60f333e2a57cb1fd64fd11e387c2da482d1d9588b6fcc5de,2025-10-21T19:31:50.020000 -CVE-2025-60361,0,0,8f4bc76ce826eb448ed19de80fff1ae55df64c0962a3502a7b485e65829fec6c,2025-10-21T19:31:50.020000 +CVE-2025-60358,0,1,1902b076898c41e064f58bd61bc01dcd2cfc257b44956b6826674d2dc65abdae,2025-10-23T12:31:42.327000 +CVE-2025-60359,0,1,f30747f0cc9ffb8d1aa900c184716797ac96bbfa92380744365476e03305b839,2025-10-23T12:34:03.940000 +CVE-2025-60360,0,1,62a1b873e30e908416dc72b218f3f86206afb21c1e4a2bca17fa8a3c0ef150a6,2025-10-23T12:34:14.797000 +CVE-2025-60361,0,1,179088c5aef33f774046d3d6cb471aa1531f5255a804328b4d10798f06f68544,2025-10-23T12:35:50.440000 CVE-2025-6037,0,0,6e5da2b594db9cc2fe4363d42a7da9d3c944746593904324c983596e937552ab,2025-08-13T18:09:00.140000 CVE-2025-60374,0,0,e7a11cd34ca4e9e80950c91b30a2ea21c310c50301b0aac55f17c33eb56936d5,2025-10-16T15:29:11.563000 CVE-2025-60375,0,0,7687f6655bf03b1d0ced608398d8f3933897812df961e788adea59d32ea0f7ed,2025-10-14T19:37:28.107000 @@ -311520,12 +311525,12 @@ CVE-2025-61152,0,0,4ca635a1ce755a06068f7df677bc91923ff9b6fa0cad880c2761bebcf4125 CVE-2025-6116,0,0,d44218c3866e1610331249ca733fac00cf57282a175ddef805ca7a6861066584,2025-10-09T17:14:03.957000 CVE-2025-6117,0,0,93d397a06a5afb5720582eac4ef4c28b88f1ad759e4a60221b38093e458e4bfb,2025-10-09T17:12:04.323000 CVE-2025-6118,0,0,f1bd3069777ca746f2fdfb8922b0cf5995c7dcab90e77f781e1887e709d6303f,2025-10-09T17:08:25.950000 -CVE-2025-61181,0,0,f3d9c788e92c2f33ef3446b371c8eed464c671ad9cfa757a882e4c8fea96de51,2025-10-21T21:15:39.803000 +CVE-2025-61181,0,1,f829609c2e0b941a6b437e3453a473884791a3655fe036d3097f105dafc2cf77,2025-10-23T12:35:14.943000 CVE-2025-61183,0,0,3129728e1f4c8e26a6903ddbc6170ed51f6d1943efb561325a5b5cca2340456f,2025-10-09T16:09:36.593000 CVE-2025-61188,0,0,808e414662cd4798194917e748ea566b78eb97bdf13d5ed3a8f12541e0aa95c1,2025-10-07T14:43:33.480000 CVE-2025-61189,0,0,09abf969e29907dc0f77db08510c747fe4e4c87390aa1a89aaf343963ac58476,2025-10-07T14:42:52.407000 CVE-2025-6119,0,0,f2397a97fdcfcfefd56020b114cdceca470e084d11ab5523cb4c6f456586eecc,2025-06-17T19:38:01.073000 -CVE-2025-61194,0,0,adbe559d78d409451c4d714ff7f2489e5ec50f6e51df53d9f75daae3b9a41e81,2025-10-21T21:15:39.963000 +CVE-2025-61194,0,1,f62a19febdbd6a6c798d0ec7505df754ef450f217712e225b98cab16a15905e5,2025-10-23T12:34:57.557000 CVE-2025-61197,0,0,94894d07d212f0c82d28d4559358ba34d114fcb1e0c690416fbd3757ddce4c84,2025-10-06T15:16:04.427000 CVE-2025-61198,0,0,063c478829ed8b58b4ec8b34c975c9b0a652f5b34ccd6047197fcf5ddcb750e3,2025-10-06T15:16:04.600000 CVE-2025-6120,0,0,1caeb083f10b59771519c237665434e8bbff629e0f44ae8ecd728310046bbe95,2025-06-17T19:37:41.883000 @@ -311536,7 +311541,7 @@ CVE-2025-61224,0,0,af46fdc0b40d4101f480cce3253e4578300e39fa7a9e658db5f22eed46dba CVE-2025-6123,0,0,01a17e91f4fa042185aa8c895b59d44590ceba8c7d0bf881122c15a612d738ad,2025-07-07T18:49:25.137000 CVE-2025-6124,0,0,677dca7ec344058583473fa87359ee4cc923db67b9defddf15b273047ea45b57,2025-08-22T19:37:02.043000 CVE-2025-6125,0,0,5970139c3a7232cc38ae30cfaf06d3e6e8652a495caadea4bc949c7056e7b9ac,2025-06-24T15:55:55.897000 -CVE-2025-61255,0,0,fd22c708c1e2b11aa2fc25c0c0e12a5bd525e64f18033ec60d64caeccaf331cf,2025-10-21T21:15:40.270000 +CVE-2025-61255,0,1,feaebff197f09db96bbfd7e6b8d8f88655b9b0f9a946e71349311d217d761109,2025-10-23T12:29:51.650000 CVE-2025-6126,0,0,3cecc13780f04c9d6e12cff3225a1c82a52d01b6e334f4c31582b486f92d1a99,2025-06-24T15:56:04.113000 CVE-2025-6127,0,0,8dab39e6a86d655538962f0fbccf53772eb4e509addd8914bf2b696eca5c0d0f,2025-06-24T15:52:30.757000 CVE-2025-6128,0,0,ef745006225bb9675a4a26298cdf9e404f3a8edfd46396f0207f11b259b591ed,2025-06-27T14:46:05.487000 @@ -311794,7 +311799,7 @@ CVE-2025-61928,0,0,89b8c834000cf307af3ff28ce346dec7f4856540131f3d5b510c8d730719e CVE-2025-61929,0,0,02baa0d28ecf85c8803b673d17585466be4896854516bd678208e3f71d478956,2025-10-14T19:36:59.730000 CVE-2025-6193,0,0,1b9eea71b477bf9c4e7b9bd5cc5d3e3853a840bafa78d229ba7a22652ff2fec9,2025-09-02T19:15:32.700000 CVE-2025-61930,0,0,d88736fd74733af41af39b7b9eed1514ed977c270ccd6edc17329e0e045a677d,2025-10-20T16:47:37.100000 -CVE-2025-61932,0,0,4b32c75ef33d16484795fd3c8d441effde91a34164fcc249c1a59842746f5303,2025-10-23T01:00:01.650000 +CVE-2025-61932,0,1,a91eee96c8b423b6a2b6be01c085d343d0a12d7461370bdf34c1cc198ef52b86,2025-10-23T13:00:14.270000 CVE-2025-61933,0,0,ad093c23bf9a0cb48f5fef0190fdac07f283e0963345810a5f5390060dc8a428,2025-10-21T12:12:54.180000 CVE-2025-61935,0,0,46cc2664cf4839e8078efbccbe6e150b2a810cc2c5041b31a1da88e76f3aa1e1,2025-10-21T12:12:43.303000 CVE-2025-61938,0,0,366d0d6090d0e62726920016bf3f2b2fbc53512dba4c4d6c6085ab1cd16c29c4,2025-10-21T20:30:15.590000 @@ -311954,13 +311959,22 @@ CVE-2025-6239,0,0,664105c8171f5e4c058f55d368fa5fe7668154d5e104c0195585907243da77 CVE-2025-62390,0,0,d8a1cd97224cab44567f05a60e3ca88afc98fe64ff4a21d6f1efa0acbfd265e8,2025-10-15T19:00:26.790000 CVE-2025-62391,0,0,74add41f3be4632916fd19f5ea721fe44272a929d5564c60c5aeb3ed1c311701,2025-10-15T19:00:20.420000 CVE-2025-62392,0,0,b36e268985190637101b21f4278a252dc9f0932f31930beb282eafe591cc4b4c,2025-10-15T19:00:15.217000 +CVE-2025-62393,1,1,32c10bbe29111f4c8327e1feeb8480af4eabc8595e8a4cdbf732362dd001e524,2025-10-23T13:15:45.973000 +CVE-2025-62394,1,1,4c0a00f2e8029bb4d23d16588c5d236067efad66fe8469338f558df5ff7e4772,2025-10-23T12:15:31.583000 +CVE-2025-62395,1,1,9f370aeea6d096a38ccac795d9f6e125f555d8d08cb74eb52d30e564f2aa8316,2025-10-23T12:15:31.747000 +CVE-2025-62396,1,1,e41c753f24d0fd15c1bade1a2e79fe41277a1c216cab1bf8a580d1fb210a07ff,2025-10-23T12:15:31.913000 +CVE-2025-62397,1,1,be6733e4878eefc91857e765542c28237969ccf3945222db179b71383f3a5d8f,2025-10-23T12:15:32.270000 +CVE-2025-62398,1,1,e62ddda1f5bb1498c625a16c907da9e1808bc1760937552db98bcb96030a1569,2025-10-23T12:15:32.430000 +CVE-2025-62399,1,1,f21f01aaf8d99f45396c59300904a2fc7489779cd46bd3f40a207448ef3f5574,2025-10-23T12:15:32.573000 CVE-2025-6240,0,0,ba4da5fd605eca3c919532cf0a8a1661ebda5a87c35d4010c4dddeaa23d93e9a,2025-06-23T20:16:59.783000 +CVE-2025-62400,1,1,ca30adc48454dee391810d1b315e1380e5d520380d710074370adff7b62d56fa,2025-10-23T12:15:32.757000 +CVE-2025-62401,1,1,a5e35277c71821eca33d3b6aa6b84ba737e21bf89db4900e66f0cd00ec58b246,2025-10-23T12:15:32.970000 CVE-2025-62407,0,0,e8b19bc093346918e71d018483ee528c17be3fc88279de2f646e8117e5934d9a,2025-10-21T19:31:50.020000 CVE-2025-62409,0,0,5dc32ea20ce98776e6113978baf7603db37dc92e7ca2b4b62511fa8877483ef8,2025-10-21T19:31:50.020000 CVE-2025-6241,0,0,8bee062251a7638b26ad8a87fe3736339d34bcf2a8f241dc34bb570fbf33d695,2025-07-30T19:15:49.213000 CVE-2025-62410,0,0,7cdbb0972d77996ac13ed738768ba8160f82ea4aa56b374bdf2c1f526e475607,2025-10-16T15:28:59.610000 -CVE-2025-62411,0,0,5a3941bc7ae312a76c67a1f5eec6ef595b40c074dd218396540dc99ff39b2291,2025-10-21T19:31:50.020000 -CVE-2025-62412,0,0,79c913cebe3da998a0b828433d33bd845bad2e516f48b5bd1b8319709e363a9b,2025-10-21T19:31:50.020000 +CVE-2025-62411,0,1,4daf9e156e3faa9f15e77378686c996278b05d8addd8fdb51684b47b40b99d67,2025-10-23T12:31:17.607000 +CVE-2025-62412,0,1,d91f85f24f9314a3c95ebbd587533095d15d41232b38c51feccc8c9df7ce8430,2025-10-23T12:31:34.033000 CVE-2025-62413,0,0,7ce7136ea0710d0aff3ad920616739fec796a0dd58920e198ffd1d0de7619795,2025-10-21T19:31:50.020000 CVE-2025-62414,0,0,4355c7a965c9d3bd6b03300d97e3f8798b1448991f7b3fae8aef1889be6f49ca,2025-10-22T17:21:50.510000 CVE-2025-62415,0,0,85b1388f86d30a767455911cb6d96f6bcd0d2c4f5134ead825fd4bd069cdeae3,2025-10-22T17:21:31.250000 @@ -312220,7 +312234,7 @@ CVE-2025-6347,0,0,c4585203a879f9683683f765c15c8bf49754bc877d8a784b47893f930829bd CVE-2025-6348,0,0,9e42f8c7e366619532860c7cd5bbe1d98918b912d4a7739385dee9f89f381c4f,2025-07-31T18:42:37.870000 CVE-2025-6350,0,0,a86ee8e77b19eb2905a6818fe7d360409130293abf6abafd272b9012f376c67f,2025-07-07T15:28:10.050000 CVE-2025-6351,0,0,58d9ebbc99a1fb6475be804d7a4fe745e483538a102155a9e63fef3060dd4f15,2025-06-26T14:05:27.120000 -CVE-2025-6352,0,0,9d15046a1965b14eb3ab7c9082bc02622d7ca5d63392e4ee8604e05d4ffdeda2,2025-06-26T13:50:10.427000 +CVE-2025-6352,0,1,386724f883e4e58c9aefc012bbc8e083805462ca085c58d35031f82d8ece6939,2025-10-23T12:19:51.613000 CVE-2025-6353,0,0,d3561510655278dc6edf6a4b73d30aaf2b9b22d58bfb6cee13f38a1a283602e7,2025-07-11T12:20:35.833000 CVE-2025-6354,0,0,2e29c14f11a4c0713b5bb333b8bcc3f82a6e68c07f853a1752a2daff23ce8fab,2025-06-26T13:30:17.410000 CVE-2025-6355,0,0,b9a2c6240bcee837befcd99c3072f09de30a7862de2fff8d81a072921a1e132c,2025-06-26T13:25:42.487000 @@ -314034,6 +314048,7 @@ CVE-2025-8423,0,0,256bff61016ba8367cc5d64de89c4344a60614bd3063f8940e5359d691b61d CVE-2025-8424,0,0,4f5d5a26d0a95a31b39deb7fcb4427040fd91165b8c4ae2180566bbdee078e83,2025-08-29T16:22:31.970000 CVE-2025-8425,0,0,1ed6f9c0132041378d9e4c51fe287cc57deca747df0f263f9f5e91d183248d62,2025-09-11T17:14:10.147000 CVE-2025-8426,0,0,692d686181ec10efd169df3927627349bdcb2e4b023c690c711461a95ff1f482,2025-08-06T16:50:11.847000 +CVE-2025-8427,1,1,5607aab0d97f639c9633f580c54b1c49c989fa376176553e1cf93dcfea2cf411,2025-10-23T13:15:46.113000 CVE-2025-8428,0,0,927ce52fb91d7843a7c2ef78c45bc20a0544d69c5c91b3e4cb116793b5061a1f,2025-10-22T14:08:48.743000 CVE-2025-8429,0,0,4099beb417580fe1fb7b46b9bc7ecf19e6a472a8125d7ddd9dc6ca9446c9e680,2025-10-22T14:02:24.350000 CVE-2025-8430,0,0,7b479a3f3794d83905b77dd4ced25c8a0b89efa56e97228dcfff3deccfed1a0a,2025-10-22T14:10:20.427000 @@ -315324,8 +315339,8 @@ CVE-2025-9972,0,0,c858d5cb332fc085c390742c1d19341f53ba61aa3995abc9c9bd64c8b9d871 CVE-2025-9975,0,0,b1f23dc970eb535920ca99e49e12f4473521da278d051437f077b4e79f3f0443,2025-10-14T19:36:59.730000 CVE-2025-9976,0,0,14fdfb7ba123561cad60c181e0158605f0221d76e4a1abbbb2a316e8cc259230,2025-10-14T19:36:29.240000 CVE-2025-9979,0,0,1c484ce9f3590c3fac34599a605eebea346d1c16468e0dda6a414f42f9beac64,2025-09-11T17:14:10.147000 -CVE-2025-9980,1,1,b4d7e4f4eb111cf053e4c67b5525c5af533da8f818cbaead30a9fe893c83ed28,2025-10-23T10:15:32.393000 -CVE-2025-9981,1,1,01bb75e2e40d85ec93cfe0a6c4a1784724e136ae7072c4ee2204c5760af5c540,2025-10-23T10:15:32.743000 +CVE-2025-9980,0,0,b4d7e4f4eb111cf053e4c67b5525c5af533da8f818cbaead30a9fe893c83ed28,2025-10-23T10:15:32.393000 +CVE-2025-9981,0,0,01bb75e2e40d85ec93cfe0a6c4a1784724e136ae7072c4ee2204c5760af5c540,2025-10-23T10:15:32.743000 CVE-2025-9983,0,0,e354461133a3ca9d7ec208c1895c055b5c2d5a76932c3a5cd177d0d8bfd16cb7,2025-09-22T21:22:33.590000 CVE-2025-9984,0,0,e3436752ed37f3ce103075e5ebc2f1c16590a3209f3001aa8e2077acfea5fc6a,2025-09-26T14:32:19.853000 CVE-2025-9985,0,0,22157881f1c097eaca9e89348de071d3c2b678453e3aa2afe4026a67d1ff6b36,2025-09-26T14:32:19.853000