USN-7952-1: libheif vulnerabilities

It was discovered that libheif did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2024-25269 Aldo Ristori discovered that libheif did not...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : GnuPG vulnerability (USN-7946-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7946-1 advisory. It was discovered that GnuPG incorrectly handled crafted input. A remote attacker could possibly u...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : GLib vulnerabilities (USN-7942-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7942-1 advisory. It was discovered that GLib incorrectly handled escaping URI strings. An attacker could use this issue to cause GLib to crash...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : usbmuxd vulnerability (USN-7929-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7929-1 advisory. It was discovered that usbmuxd incorrectly handled certain paths received with the SavePairRecord command. A local attacker could...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : fontTools vulnerabilities (USN-7917-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7917-1 advisory. It was discovered that the subsetting module of fontTools was vulnerable to an XML External Entity XEE attack. An...

USN-7917-1: fontTools vulnerabilities

It was discovered that the subsetting module of fontTools was vulnerable to an XML External Entity XEE attack. An unauthenticated remote attacker could possibly use this issue to include arbitrary files from the file system or make web requests from the host system. This issue only affected Ubunt...

CVE-2025-14321

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

CVE-2025-14323

Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

Exploit for CVE-2025-55182

Lab mô phỏng khai thác CVE-2025-55182 trên Ubuntu 22.04 1...

Ubuntu: Security Advisory (USN-7895-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7878-1: cups-filters vulnerabilities

It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,...

USN-7878-1 cups-filters vulnerabilities

It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Lasso vulnerabilities (USN-7872-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7872-1 advisory. It was discovered that Lasso incorrectly handled certain malformed SAML responses. A remote attacker could possibly use this issue to...

Ubuntu: Security Advisory (USN-7862-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROOT-OS-UBUNTU-2204-CVE-2024-10041 CVE-2024-10041 in rootio-pam - Patched by Root

Root has patched CVE-2024-10041 in the rootio-pam package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2025-13019

Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13014

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

Ubuntu: Security Advisory (USN-7859-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : GNU binutils vulnerabilities (USN-7847-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7847-1 advisory. It was discovered that GNU binutils incorrectly handled certain files. An attacker could possibly use this issue to cause a crash or...

Ubuntu: Security Advisory (USN-7841-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...