ThreatCluster

Multiple CVEs Addressed in jfs Module Vulnerabilities

First seen 18 Feb 2026, 12:23 UTC Api.Msrc.Microsoft 39

Article Content

Browse articles
ThreatCluster

Two vulnerabilities in the jfs file system have been reported, identified as CVE-2025-37742 and CVE-2025-38204. CVE-2025-37742, published on May 1, 2025, addresses an uninitialized value access issue, while CVE-2025-38204, published on July 4, 2025, fixes an array index out-of-bounds read. Affected systems include those utilizing the jfs file system in Microsoft environments.

Timeline

2025-05-01
CVE-2025-37742 published
2025-07-04
CVE-2025-38204 published
2026-02-18
Information published on both CVEs