Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,690
Maven
5,000+
npm
4,320
NuGet
760
pip
4,096
Pub
12
RubyGems
958
Rust
1,063
Swift
45
Unreviewed advisories
All unreviewed
5,000+

5,659 advisories

Loading
Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote... High Unreviewed
CVE-2025-13633 was published Dec 2, 2025
Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker... High Unreviewed
CVE-2025-13638 was published Dec 2, 2025
In display, there is a possible memory corruption due to use after free. This could lead to local... Moderate Unreviewed
CVE-2025-20770 was published Dec 2, 2025
A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media... Moderate Unreviewed
CVE-2025-65407 was published Dec 1, 2025
A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming... Moderate Unreviewed
CVE-2025-65405 was published Dec 1, 2025
Software installed and run as a non-privileged user may conduct improper GPU system calls to... Moderate Unreviewed
CVE-2025-58408 was published Dec 1, 2025
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU... Moderate Unreviewed
CVE-2025-6349 was published Dec 1, 2025
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU... Moderate Unreviewed
CVE-2025-8045 was published Dec 1, 2025
UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability... Moderate Unreviewed
CVE-2025-58311 was published Nov 28, 2025
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of... Moderate Unreviewed
CVE-2025-58307 was published Nov 28, 2025
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of... High Unreviewed
CVE-2025-58303 was published Nov 28, 2025
Use after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to cause... High Unreviewed
CVE-2025-65503 was published Nov 24, 2025
A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from... Moderate Unreviewed
CVE-2025-61662 was published Nov 18, 2025
In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due... High Unreviewed
CVE-2025-48593 was published Nov 18, 2025
Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote... High Unreviewed
CVE-2024-9126 was published Nov 14, 2025
AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability... Moderate Unreviewed
CVE-2011-10034 was published Nov 13, 2025
A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free... High Unreviewed
CVE-2025-11797 was published Nov 12, 2025
Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability... High Unreviewed
CVE-2025-61834 was published Nov 11, 2025
Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability... High Unreviewed
CVE-2025-64531 was published Nov 11, 2025
Format Plugins versions 1.1.1 and earlier are affected by a Use After Free vulnerability that... Moderate Unreviewed
CVE-2025-61842 was published Nov 11, 2025
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to... High Unreviewed
CVE-2025-62213 was published Nov 11, 2025
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-62216 was published Nov 11, 2025
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-62203 was published Nov 11, 2025
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-62205 was published Nov 11, 2025
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-62199 was published Nov 11, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database