CVE-2025-40056 vhost: vringh: Fix copy_to_iter return value check

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40056

CVE-2025-40055 ocfs2: fix double free in user_cluster_connect()

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40055

CVE-2025-40053 net: dlink: handle copy_thresh allocation failure

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40053

CVE-2025-40035 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40035

CVE-2025-40030 pinctrl: check the return value of pinmux_ops::get_function_name()

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40030

CVE-2025-40052 smb: client: fix crypto buffers in non-linear memory

Information published.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-40052

Chromium: CVE-2023-4863 Heap buffer overflow in WebP

Updated product information in the Software Update table. This is an informational change only.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863

CVE-2025-53783 Microsoft Teams Remote Code Execution Vulnerability

Updated product information in the Software Update table. This is an informational change only.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53783

CVE-2025-60711 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60711

Chromium: CVE-2025-12036 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12036

Chromium: CVE-2025-12428 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12428

Chromium: CVE-2025-12429 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12429

Chromium: CVE-2025-12432 Race in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12432

Chromium: CVE-2025-12430 Object lifecycle issue in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12430

Chromium: CVE-2025-12431 Inappropriate implementation in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12431

Chromium: CVE-2025-12433 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12433

Chromium: CVE-2025-12438 Use after free in Ozone

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12438

Chromium: CVE-2025-12437 Use after free in PageInfo

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12437

Chromium: CVE-2025-12436 Policy bypass in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12436

Chromium: CVE-2025-12435 Incorrect security UI in Omnibox

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12435

Chromium: CVE-2025-12434 Race in Storage

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-12434