OPENSUSE-SU-2025:15688-1 libmozjs-140-0-140.4.0-2.1 on GA media

These are all security issues fixed in the libmozjs-140-0-140.4.0-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 43 : cef (2025-1e8f05e0a6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-1e8f05e0a6 advisory. Update to 140.1.15^chromium140.0.7339.207 rhbz2396308 CVE-2025-10890: Side-channel information leakage in V8 CVE-2025-10891: Integer overflow in V8...

Mozilla Firefox ESR Security Update (mfsa_2025-83) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR Security Update (mfsa_2025-83) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Lightship Security and the OpenSSL Corporation Submit OpenSSL 3.5.4 for FIPS 140-3 Validation

Newark, United States, 9th October 2025, CyberNewsWire...

EUVD-2013-4060

Malware in sbrugna...

EUVD-2013-4050

Malware in sbrugna...

EUVD-2016-0341

Malware in sbrugna...

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987439)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987439 advisory. An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers...

EUVD-2023-31094

Malicious code in bioql PyPI...

Debian dla-4311 : thunderbird - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4311 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4311-1 [email protected]...

[SECURITY] [DSA 6011-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6011-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 25, 2025 https://www.debian.org/security/faq -...

CVE-2025-10892

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-10890

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2025-10500

Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-10501

A use-after-free vulnerability exists in the WebRTC component of Google Chrome (prior to version 140.0.7339.185 ). A remote attacker can exploit this flaw via a crafted HTML page to potentially cause heap corruption . This vulnerability also affects Microsoft Edge and Chromium derivatives. Remedi...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume th...

CVE-2025-10528

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability affects Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

OPENSUSE-SU-2025:15548-1 chromedriver-140.0.7339.127-1.1 on GA media

These are all security issues fixed in the chromedriver-140.0.7339.127-1.1 package on the GA media of openSUSE Tumbleweed...

Google Chrome < 140.0.7339.132 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 140.0.7339.132. It is, therefore, affected by multiple vulnerabilities as referenced in the 202509stable-channel-update-for-desktop9 advisory. - Inappropriate implementation in Mojo in Google Chrome on Android, Linux,...