ROS-20260925-73-0028

The vulnerability of the BPFCALL4 function in the net/core/filter.c module related to the execution of kernel network functions in Linux operating systems involves a pointer shift beyond the allocated memory range. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260924-73-0050

The vulnerability of the net FailoverSelectQueue function in the drivers/net/net Failover.c module of the Linux kernel network device driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the uvcstartstreamingvideo function in the drivers/media/usb/uvc/uvcqueue.c file of the Linux operating system’s multimedia device driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...

ROS-20260818-73-0012

The vulnerability of the Node.js software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

LXD Container Management System Input Validation

The vulnerability of the LXD container management system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Btrfs File System Buffer Overflow DoS

The vulnerability of the btrfsrepaironesector function in the fs/btrfs/extentio.c module of the Btrfs file system support in Linux kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

Linux kernel tls_user_config Buffer Overflow DoS

The vulnerability of the tlsuserconfig function in the include/net/tls.h module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

About the security content of iOS 18.3 and iPadOS 18.3

About the security content of iOS 18.3 and iPadOS 18.3 This document describes the security content of iOS 18.3 and iPadOS 18.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

Google Chrome Tab Groups Data Compromise

The vulnerability of Google Chrome’s Tab Groups component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Firefox Buffer Overflow Information Disclosure

The vulnerability of the Firefox browser is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility...

Intel Graphics Driver User Mode Driver Data Compromise

The vulnerability of the User Mode Driver component of the Intel Graphics Driver relates to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

SeaMonkey Data Compromise

The use of this feature after release in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox allows malicious actors working remotely to execute arbitrary code or cause service failures errors in handling dynamic memory...

MySQL Information Disclosure

The vulnerability of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise accessibility by affecting the Security:Encryption server...

OpenSUSE Data Compromise

The vulnerability of the libgsf package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

OpenSUSE Data Compromise

The multiple vulnerabilities in the mono-ikvm package of the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

OpenSUSE Data Compromise

The vulnerability of the xorg-x11-Xvfb package in the operating system openSUSE can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

OpenSUSE Data Compromise

The vulnerability of the libldns1 package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Gentoo Linux Data Compromise

The vulnerability of the ldns package up to version 1.6.11 of the Gentoo Linux operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

CentOS Data Compromise

The vulnerability of the xmlsec1-1.2.9 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

CentOS Data Compromise

The vulnerability of the rsyslog-7.4.7 package on the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...