Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-1839,CVE-2025-14920, CVE-2026-4372

Summary IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-1839,CVE-2025-14920,CVE-2026-4372. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2025-14920 DESCRIPTION: Huggi...

CVE-2026-4372 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, text-generation-inference, nemo...

CVE-2026-4372

creationtimestamp| type| source ---|---|--- 2026-05-25 08:31:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116634281340740498 2026-05-26 13:25:33+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mmr3qyfrjn2a 2026-06-05 11:00:51+00:00| seen|...

Debian: Security Advisory (DLA-4372-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2018-4372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari...

Mageia: Security Advisory (MGASA-2025-0159)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-140200b18d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-63db6c850f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : chromium (2025-140200b18d)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-140200b18d advisory. Update to 136.0.7103.92 CVE-2025-4372: Use after free in WebAudio Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2025-4372 vulnerabilities

Vulnerabilities for packages: chromium...

Fedora: Security Advisory (FEDORA-2025-24e77c2676)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Edge (Chromium-Based) Use After Free Vulnerability (May 2025)

Microsoft Edge Chromium-Based is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE Security Advisory (openSUSE-SU-2025:0148-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : chromium (2025-24e77c2676)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-24e77c2676 advisory. Update to 136.0.7103.92 CVE-2025-4372: Use after free in WebAudio Tenable has extracted the preceding description block directly from the Fedora security...

openSUSE 15 Security Update : chromium (openSUSE-SU-2025:0148-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:0148-1 advisory. Chromium 136.0.7103.92 boo1242717 CVE-2025-4372: Use after free in WebAudio Tenable has extracted the preceding description block directly from the SUSE...

OPENSUSE-SU-2025:0148-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 136.0.7103.92 boo1242717 CVE-2025-4372: Use after free in WebAudio...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0148-1 Rating: important References: 1242717 Cross-References: CVE-2025-4372 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update...

Chromium: CVE-2025-4372 Use after free in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2025-4372

Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

Debian: Security Advisory (DSA-5916-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...