GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,737
Maven
5,000+
npm
4,337
NuGet
764
pip
4,112
Pub
12
RubyGems
960
Rust
1,068
Swift
45
Unreviewed advisories
All unreviewed
5,000+
115,195 advisories
Filter by severity
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
High
Unreviewed
CVE-2025-62553
was published
Dec 9, 2025
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
High
Unreviewed
CVE-2025-62555
was published
Dec 9, 2025
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to...
High
Unreviewed
CVE-2025-62467
was published
Dec 9, 2025
Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal')...
High
Unreviewed
CVE-2025-60024
was published
Dec 9, 2025
Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized...
High
Unreviewed
CVE-2025-62466
was published
Dec 9, 2025
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
High
Unreviewed
CVE-2025-62559
was published
Dec 9, 2025
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to...
High
Unreviewed
CVE-2025-62561
was published
Dec 9, 2025
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute...
High
Unreviewed
CVE-2025-62552
was published
Dec 9, 2025
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to...
High
Unreviewed
CVE-2025-62556
was published
Dec 9, 2025
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to...
High
Unreviewed
CVE-2025-62560
was published
Dec 9, 2025
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate...
High
Unreviewed
CVE-2025-62569
was published
Dec 9, 2025
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
High
Unreviewed
CVE-2025-62565
was published
Dec 9, 2025
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code...
High
Unreviewed
CVE-2025-62564
was published
Dec 9, 2025
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an...
High
Unreviewed
CVE-2025-62554
was published
Dec 9, 2025
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
High
Unreviewed
CVE-2025-62562
was published
Dec 9, 2025
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
High
Unreviewed
CVE-2025-62557
was published
Dec 9, 2025
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker...
High
Unreviewed
CVE-2025-62456
was published
Dec 9, 2025
Improper input validation in Windows Message Queuing allows an authorized attacker to elevate...
High
Unreviewed
CVE-2025-62455
was published
Dec 9, 2025
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker...
High
Unreviewed
CVE-2025-62470
was published
Dec 9, 2025
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized...
High
Unreviewed
CVE-2025-62454
was published
Dec 9, 2025
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker...
High
Unreviewed
CVE-2025-62474
was published
Dec 9, 2025
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
High
Unreviewed
CVE-2025-62558
was published
Dec 9, 2025
Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an...
High
Unreviewed
CVE-2025-62549
was published
Dec 9, 2025
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
High
Unreviewed
CVE-2025-62563
was published
Dec 9, 2025
Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a...
High
Unreviewed
CVE-2025-62550
was published
Dec 9, 2025
ProTip!
Advisories are also available from the
GraphQL API