Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,950
Erlang
39
GitHub Actions
38
Go
2,603
Maven
5,000+
npm
4,250
NuGet
755
pip
4,013
Pub
12
RubyGems
953
Rust
1,048
Swift
45
Unreviewed advisories
All unreviewed
5,000+

5,447 advisories

Loading
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-59227 was published Oct 14, 2025
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-58731 was published Oct 14, 2025
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-58732 was published Oct 14, 2025
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-58733 was published Oct 14, 2025
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-58734 was published Oct 14, 2025
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-58736 was published Oct 14, 2025
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-58735 was published Oct 14, 2025
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-58738 was published Oct 14, 2025
Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-58737 was published Oct 14, 2025
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate... High Unreviewed
CVE-2025-59189 was published Oct 14, 2025
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a... High Unreviewed
CVE-2025-58718 was published Oct 14, 2025
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to... Moderate Unreviewed
CVE-2025-58719 was published Oct 14, 2025
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2025-58728 was published Oct 14, 2025
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-58730 was published Oct 14, 2025
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. High Unreviewed
CVE-2025-55678 was published Oct 14, 2025
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate... High Unreviewed
CVE-2025-55684 was published Oct 14, 2025
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate... High Unreviewed
CVE-2025-55685 was published Oct 14, 2025
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate... High Unreviewed
CVE-2025-55686 was published Oct 14, 2025
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate... High Unreviewed
CVE-2025-55689 was published Oct 14, 2025
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate... High Unreviewed
CVE-2025-55688 was published Oct 14, 2025
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate... High Unreviewed
CVE-2025-55691 was published Oct 14, 2025
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate... High Unreviewed
CVE-2025-55690 was published Oct 14, 2025
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. High Unreviewed
CVE-2025-55693 was published Oct 14, 2025
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate... High Unreviewed
CVE-2025-55331 was published Oct 14, 2025
Use after free in Connected Devices Platform Service (Cdpsvc) allows an unauthorized attacker to... High Unreviewed
CVE-2025-55326 was published Oct 14, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database