828

1. CVE-2025-25017｜Kibana
   • https://discuss.elastic.co/t/kibana-8-18-8-8-19-4-9-0-7-9-1-4-security-update-esa-2025-16/382450
   • XSS。他にもいくつか(Stored含む)。
2. CVE-2025-11458｜Chrome
   • https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop.html
   • https://www.security-next.com/175455
   • Heap Buffer Overflow。
3. CVE-2023-6215｜HP Sure Start IFD Protection
   • https://support.hp.com/us-en/document/ish_13064666-13064688-16/hpsbhf04061
   • https://nvd.nist.gov/vuln/detail/CVE-2023-6215
   • 影響はいろいろ。BIOS周り。
4. CVE-2025-59425｜vLLM
   • https://github.com/vllm-project/vllm/security/advisories/GHSA-wr9h-g72x-mwhm
   • https://nvd.nist.gov/vuln/detail/CVE-2025-59425
   • タイミング攻撃に対して脆弱らしい。APIキーが推測可能とか。
5. CVE-2025-11462｜AWS ClientVPN macOS
   • https://aws.amazon.com/jp/security/security-bulletins/AWS-2025-020/
   • https://nvd.nist.gov/vuln/detail/CVE-2025-11462
   • 権限昇格。Macのみ。
6. CVE-2025-61772｜Rack
   • https://github.com/rack/rack/security/advisories/GHSA-wpv5-97wm-hp9c
   • https://nvd.nist.gov/vuln/detail/CVE-2025-61772
   • DoS。マルチパート処理に起因する模様。他2つもDoS。
7. CVE-2023-49886｜IBM Transformation Extender Advanced
   • https://www.ibm.com/support/pages/node/7247179
   • https://nvd.nist.gov/vuln/detail/CVE-2023-49886
   • RCE。Javaデシリアライゼーション起因。
8. CVE-2025-11230｜HA Proxy
   • https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability
   • DoS。mjsonライブラリに起因。