SEARCHSearch the cs-graph

CVE-#### · MITRE T#### · CWE-#### · ATLAS AML.T#### · D3-XX · compliance article references. Authored by Adam Lundqvist.

40 results for “kev-cve-2025-14847” · 1.20 s · cached

Facets · 1 entity types

40 CVE
CVE-2025-49735CVE

CVE-2025-49735

Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.

CVSS 8.1EPSS 1.1%
Match for kev-cve-2025-14847
CVE-2025-49655CVE

CVE-2025-49655

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchMod…

CVSS 9.8EPSS 0.8%
Match for kev-cve-2025-14847
CVE-2025-14087CVE

CVE-2025-14087

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GV…

CVSS 5.6EPSS 0.8%gnome
Match for kev-cve-2025-14847
CVE-2026-4789CVE

CVE-2026-4789

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

CVSS 9.8EPSS 0.7%
Match for kev-cve-2025-14847
CVE-2025-24260CVE

CVE-2025-24260

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker in a privileged position may be able to perfor…

CVSS 9.8EPSS 0.9%
Match for kev-cve-2025-14847
CVE-2025-14749CVE

CVE-2025-14749

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/device_service of the component ONVIF PTZ Control Interface. The manipulation leads to…

CVSS 8.8EPSS 0.8%
Match for kev-cve-2025-14847
CVE-2025-54949CVE

CVE-2025-54949

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493d…

CVSS 9.8EPSS 0.7%
Match for kev-cve-2025-14847
CVE-2025-41646CVE

CVE-2025-41646

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device

CVSS 9.8EPSS 51.3%
Match for kev-cve-2025-14847
CVE-2025-41426CVE

CVE-2025-41426

Affected Vertiv products contain a stack based buffer overflow vulnerability. An attacker could exploit this vulnerability to gain code execution on the device.

CVSS 9.8EPSS 0.8%
Match for kev-cve-2025-14847
CVE-2025-11960CVE

CVE-2025-11960

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Aryom Software High Technology Systems Inc. KVKNET allows Reflected XSS. This issue affec…

CVSS 6.1EPSS 0.2%
Match for kev-cve-2025-14847
CVE-2026-2447CVE

CVE-2026-2447

Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.

CVSS 8.8EPSS 0.6%mozilla
Match for kev-cve-2025-14847
CVE-2026-40447CVE

CVE-2026-40447

Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

CVSS 5.1EPSS 0.3%samsung
Match for kev-cve-2025-14847
CVE-2025-10855CVE

CVE-2025-10855

Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers. This issue affects Teknoera: through 01102…

CVSS 7.5EPSS 0.4%
Match for kev-cve-2025-14847
CVE-2025-61081CVE

CVE-2025-61081

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Match for kev-cve-2025-14847
CVE-2025-12727CVE

CVE-2025-12727

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS 8.8EPSS 0.3%google
Match for kev-cve-2025-14847
CVE-2026-46280CVE

CVE-2026-46280

In the Linux kernel, the following vulnerability has been resolved: lib: test_hmm: evict device pages on file close to avoid use-after-free Patch series "Minor hmm_test fixes and cleanups". Two bu…

CVSS 7.8EPSS 0.2%linux
Match for kev-cve-2025-14847
CVE-2025-59247CVE

CVE-2025-59247

Azure PlayFab Elevation of Privilege Vulnerability

CVSS 9.8EPSS 1.5%
Match for kev-cve-2025-14847
CVE-2025-30749CVE

CVE-2025-30749

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u4…

CVSS 8.1EPSS 1.2%
Match for kev-cve-2025-14847
CVE-2025-55050CVE

CVE-2025-55050

CWE-1242: Inclusion of Undocumented Features

CVSS 9.8EPSS 0.3%
Match for kev-cve-2025-14847
CVE-2025-9748CVE

CVE-2025-9748

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument…

CVSS 9.8EPSS 0.8%
Match for kev-cve-2025-14847
Hybrid search: an exact-match keyword pass (title + MITRE-ID + body-head) fused with Vertex AI semantic similarity (text-embedding-005, cosine vector search over the corpus) via reciprocal-rank fusion — exact IDs stay pinned, related concepts surface by meaning. Curated by Adam Lundqvist, Founder at SQUR.