Мсвсфера
329 CVEs tracked. 5 of them are in CISA KEV.
This hub aggregates every CVE we track for ��свсфера, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Мсвсфера CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 8 |
| 2024-11 | 7 |
| 2024-12 | 37 |
| 2025-01 | 10 |
| 2025-02 | 25 |
| 2025-03 | 9 |
| 2025-04 | 5 |
| 2025-05 | 10 |
| 2025-06 | 20 |
| 2025-07 | 22 |
| 2025-08 | 7 |
| 2025-09 | 14 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 329 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical51
- High147
- Medium120
- Low11
Latest CVEs
The 15 most recently published vulnerabilities affecting Мсвсфера.
- CVE-2025-7493Freeipa: idm: privilege escalation from host to domain admin in freeipa9.1
- CVE-2025-41244VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)7.8
- CVE-2025-10892Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)8.8
- CVE-2025-10891Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)8.8
- CVE-2025-10890Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)9.1
- CVE-2025-10537Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8
- CVE-2025-10532Incorrect boundary conditions in the JavaScript: GC component6.5
- CVE-2025-10536Information disclosure in the Networking: Cache component6.2
- CVE-2025-10528Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3
- CVE-2025-10529Same-origin policy bypass in the Layout component6.5
- CVE-2025-10527Sandbox escape due to use-after-free in the Graphics: Canvas2D component7.1
- CVE-2025-10533Integer overflow in the SVG component8.8
- CVE-2025-58364cups: Remote DoS via null dereference6.5
- CVE-2025-58060cups has Authentication bypass with AuthType Negotiate8.0
- CVE-2025-8067Udisks: out-of-bounds read in udisks daemon8.5
Product grouping is registry-driven, with AI assist and human review. How it works