CVE-2025-21183

CVSS v3 Score
7.4
High

Vulnerability Description

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

CVSS:7.4(High)

In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of privilege with no additional execution p...

CVSS:7.4(High)

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

CVSS:7.5(High)

Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.

CVSS:7.5(High)

A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.

CVSS:7.5(High)

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.

CVSS:7.5(High)

In libwebp 0.5.1, there is a double free bug in libwebpmux.