the critical ledger · updated hourly

Critical vulnerability intelligence.

New critical security flaws land every day. Vulnary tells you what each one actually is, who it hits, how serious it really is, and the exact steps to shut it down.

Browse the feed ↓Am I affected? →

scroll

2,108critical tracked/71new today/65known-exploited/0exploit available/2,108critical tracked/71new today/65known-exploited/0exploit available/2,108critical tracked/71new today/65known-exploited/0exploit available/2,108critical tracked/71new today/65known-exploited/0exploit available/

The feed (latest)

2,108 entries

Your stack

Add the software you run to see what affects you.

view

source

fromto

1873

CVE-2025-37935

Linux Linux Kernel +4 more

The vulnerability is a critical flaw in the Linux kernel's mtk_eth_soc Ethernet driver that can cause a system panic when handling packets on systems with 4GB or more RAM. It occurs when the MTK_RESETTING flag is detected, leading to incorrect processing of network descriptors. The issue has been resolved by applying a patch from MediaTek's SDK.

Critical· 9.8<1% likelyfix available

published May 20, 2025deletes in 24d

1874

CVE-2025-37894

Linux Linux Kernel +4 more

A critical bug in the Linux kernel could cause the system to crash when handling certain network packets. The issue occurs when the kernel mistakenly treats a special socket type as a normal one, leading to a crash. The problem has been fixed in the kernel code.

Critical· 9.8<1% likelyfix available

published May 20, 2025deletes in 24d

1875

CVE-2025-37879

Linux Linux Kernel +1 more

A bug in the Linux kernel’s 9p network protocol could let a malicious server trick the client into treating a negative read/write count as a large positive number, potentially causing a null pointer dereference. The issue has been fixed in the kernel source.

Critical· 9.8<1% likelyfix available

published May 9, 2025deletes in 24d

1876

CVE-2025-4318

A security flaw in the aws-amplify/amplify-codegen-ui package allows for the execution of unauthorized code. This occurs because the software does not properly validate certain property expressions used in the AWS Amplify Studio UI components.

Critical· 9<1% likely

published May 5, 2025deletes in 38d

1877

CVE-2023-53116

Linux Linux Kernel +2 more

A critical bug in the Linux kernel’s NVMe target subsystem could let an attacker crash the system or run arbitrary code. The flaw occurs when a request is freed too early, leading to a use‑after‑free. The issue has been fixed in recent kernel releases.

Critical· 9.8<1% likelyfix available

published May 2, 2025deletes in 29d

1878

CVE-2023-53083

Linux Linux Kernel +3 more

A critical flaw in the Linux kernel’s NFS server can corrupt internal data structures when handling partial page reads, potentially leading to memory corruption or a crash. The issue occurs when the kernel mistakenly re‑adds a partially read page to an array, causing an overflow. The vulnerability has been fixed in the kernel.

Critical· 9.8<1% likelyfix available

published May 2, 2025deletes in 29d

1879

CVE-2022-49770

Linux Linux Kernel +12 more

CVE-2022-49770 is a critical vulnerability in the Linux kernel where improper handling of snap decoding could cause realm duplication, leading to use-after-free errors or crashes. The issue has been resolved in updated kernel versions.

Critical· 9.8<1% likelyfix available

published May 1, 2025deletes in 29d

1880

CVE-2025-37778

Linux Linux Kernel +3 more

A critical flaw in the Linux kernel's SMB server can cause a program to crash or potentially allow an attacker to execute arbitrary code. The bug involves a dangling pointer that can be triggered during Kerberos authentication. It has been fixed in recent kernel releases.

Critical· 9.8<1% likelyfix available

published May 1, 2025deletes in 29d

1881

CVE-2025-37750

Linux Linux Kernel +1 more

A critical use‑after‑free bug was found in the Linux kernel’s SMB client, allowing an attacker to crash the system or potentially execute code. The flaw occurs when multiple SMB channels reuse a cryptographic context, leading to a memory corruption error. The issue has been fixed in recent kernel releases.

Critical· 9.8<1% likelyfix available

published May 1, 2025deletes in 24d

1882

CVE-2025-31324

Sap Netweaver

This vulnerability allows an unauthenticated attacker to upload malicious binaries to SAP NetWeaver Visual Composer Metadata Uploader, potentially compromising the system's confidentiality, integrity, and availability. It affects SAP NetWeaver 7.50 and has a CVSS score of 10.

Critical· 10100% likelyexploitedfix available

published Apr 24, 2025deletes in 29d

1883

CVE-2025-22110

Linux Linux Kernel

A bug in the Linux kernel’s netfilter nfnetlink_queue subsystem could cause a memory allocation error because a context variable was used before it was initialized. The issue has been fixed by initializing the context safely.

Critical· 9.8<1% likelyfix available

published Apr 16, 2025deletes in 24d

1884

CVE-2025-22088

Linux Linux Kernel

A use-after-free vulnerability exists in the Linux kernel's RDMA/erdma component, specifically in the erdma_accept_newconn() function, where memory is freed before being used. This flaw could allow an attacker to execute arbitrary code, cause a denial of service, or escalate privileges. The issue has been resolved with a patch in the Linux kernel.

Critical· 9.8<1% likelyfix available

published Apr 16, 2025deletes in 24d

1885

CVE-2025-22077

Linux Linux Kernel +7 more

A critical flaw in the Linux kernel’s CIFS client caused TCP sockets to hang in a state that could leak resources and lead to crashes. The bug was introduced by a commit that incorrectly stopped timers and was later reverted. The vulnerability is now fixed in recent kernel releases.

Critical· 9.8<1% likelyfix available

published Apr 16, 2025deletes in 24d

1886

CVE-2025-22021

Linux Linux Kernel +1 more

In the Linux kernel, IPv6 source NAT (SNAT) packets are not correctly matched to sockets because a missing conntrack lookup prevents transparent socket matching. This flaw can break network policies in Kubernetes clusters that use Cilium and Envoy, allowing traffic to bypass intended restrictions.

Critical· 10<1% likelyfix available

published Apr 16, 2025deletes in 24d

1887

CVE-2025-1782

In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized, allowing an authenticated attacker to include arbitrary files and execute code as the web server user. This flaw is rated critical with a CVSS base score of 9.9. Exploitation requires a valid user account.

Critical· 9.9<1% likely

published Apr 14, 2025deletes in 36d

1888

CVE-2025-22457

Ivanti Connect Secure +22 more

A critical security flaw in certain Ivanti security products allows an attacker to run their own code on the system remotely. This vulnerability is caused by a memory error known as a stack-based buffer overflow.

Critical· 9100% likelyexploitedfix available

published Apr 3, 2025deletes in 29d

1889

CVE-2025-21988

Linux Linux Kernel

A critical flaw in the Linux kernel can corrupt data and crash the system. The bug occurs when multiple subrequests donate data to the same request, overwriting a field and triggering a crash. The issue has been fixed in a kernel update.

Critical· 9.8<1% likelyfix available

published Apr 2, 2025deletes in 24d

1890

CVE-2025-21954

Linux Linux Kernel +6 more

A critical vulnerability in the Linux kernel's netmem subsystem could allow transmission of unreadable socket buffers, potentially causing unsafe DMA mapping operations. The flaw has been resolved by preventing the transmission of such unreadable skbs. Users should apply the kernel update that addresses this issue to mitigate the risk.

Critical· 9.8<1% likelyfix available

published Apr 1, 2025deletes in 24d