2025-10 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 (KB5066136)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2023-53556

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in freenetdev We do netifnapiadd for all allocated qvectors, but potentially do netifnapidel for part of them, then kfree qvectors and leave invalid pointers at dev-napilist. Reproducer: root@host cat...

.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network...

ASP.NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an authorized attacker to bypass a security feature over a network...

October 14, 2025-KB5066136 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016

None None...

.NET 9.0 Update - October 14, 2025 (KB5068332)

None None...

October 14, 2025-KB5066743 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022

None None...

October 14, 2025-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5066741)

None None...

kernel: net: usb: smsc75xx: Limit packet length to skb->len

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb-len Packet length retrieved from skb data may be larger than the actual socket buffer length up to 9026 bytes. In such case the cloned skb passed up the network stack will leak kerne...

SUSE SLES15 Security Update : kernel (Live Patch 29 for SLE 15 SP5) (SUSE-SU-2025:03562-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03562-1 advisory. This update for the Linux Kernel 5.14.21-15050055116 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: schqfq: Fix...

SUSE SLES15 Security Update : kernel (Live Patch 13 for SLE 15 SP6) (SUSE-SU-2025:03568-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03568-1 advisory. This update for the Linux Kernel 6.4.0-1506002360 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: schqfq: Fix ra...

Microsoft ASP.NET Core 环境问题漏洞

Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. Microsoft ASP.NET Core suffers from an environment issue...

CVE-2025-55315

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an authorized attacker to bypass a security feature over a network...

CVE-2025-55247

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

SUSE SLES15 Security Update : kernel (Live Patch 2 for SLE 15 SP7) (SUSE-SU-2025:03576-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03576-1 advisory. This update for the Linux Kernel 6.4.0-150700536 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: schqfq: Fix rac...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.25 (SUSE-SU-2025:03547-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03547-1 advisory. go1.25.2 released 2025-10-07 includes security fixes to the archive/tar, crypto/tls, crypto/x50...

SUSE SLES15 Security Update : kernel (Live Patch 41 for SLE 15 SP4) (SUSE-SU-2025:03550-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03550-1 advisory. This update for the Linux Kernel 5.14.21-15040024167 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: schqfq: Fix...

SUSE SLES15 Security Update : kernel (Live Patch 58 for SLE 15 SP3) (SUSE-SU-2025:03583-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03583-1 advisory. This update for the Linux Kernel 5.3.18-15030059207 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: schqfq: Fix...

SUSE SLES15 Security Update : kernel (Live Patch 42 for SLE 15 SP4) (SUSE-SU-2025:03552-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03552-1 advisory. This update for the Linux Kernel 5.14.21-15040024170 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: schqfq: Fix...

KLA89273 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege...