CVE-2025-59610

MediumCVSS 6.4/10Last modified Jul 22, 2026

Description

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

No affected versions have been published.

Timeline

Published
Jun 1, 2026
Last modified
Jul 22, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-596116.7Memory corruption in diagnostic services due to absence of input validationCVE-2025-596126.7Memory corruption in windows drivers while sending incorrect trusted application requestCVE-2025-596136.7Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.CVE-2025-596146.7Memory Corruption when sending random number generator command with insufficient output buffer size.CVE-2025-596157.8Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper sCVE-2025-596167.8Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.CVE-2025-596177.3Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.CVE-2025-59627.7A flaw was found in the Lightspeed history service. Insufficient access controls allow a local, unprivileged user to access and manipulate tCVE-2025-59634.8The Postbox's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" anCVE-2025-59646.5A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the sCVE-2025-59657.2In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper NeutralizationCVE-2025-59668.1Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword repo
CVE-2025-59610: Medium severity, CVSS 6.4 | Vulnix