ROS-20251111-06

A vulnerability in the Glib library is related to boundary conditions in the gettmpfile function in glib/gfileutils.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

PT-2025-46365

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Description The Graphics: WebGPU component in Firefox contains incorrect boundary conditions. This issue does not have any reported real-world exploitation or estimated number of affected devices. The issue reside...

PT-2025-46361

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Description An issue exists in the Graphics: WebGPU component due to incorrect boundary conditions. Recommendations Update to Firefox version 145 or later...

PT-2025-46362

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Description An issue exists in the Graphics: WebGPU component due to incorrect boundary conditions. Recommendations Update to Firefox version 145 or later...

PT-2025-46363

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Description A security issue exists in Firefox due to incorrect boundary conditions within the Graphics: WebGPU component, potentially leading to a sandbox escape. The issue was reported by Oskar L. Recommendation...

PT-2025-46366

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Description A sandbox escape issue exists due to incorrect boundary conditions within the Graphics: WebGPU component. This could allow an attacker to escape the sandbox. Recommendations Update Firefox to version 1...

Important: runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format OCF that provides container runtime. Security Fixes: runc: container escape via 'masked path' abuse due to mount race conditions CVE-2025-31133 runc: container escape with malicious config due to /dev/console mou...

Firefox -- Multiple vulnerabilities

https://bugzilla.mozilla.org/showbug.cgi?id=1994441 reports: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. Incorrect boundary conditions in the Graphics: WebGPU component. JIT miscompilation in the JavaScript Engine: JIT component. Sandbox escape due to...

JetBrains Hub 竞争条件问题漏洞

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. A competitive conditions issue vulnerability exists in versions prior to JetBrains Hub 2025.3.104432, which stems from an information disclosure...

JetBrains Hub 竞争条件问题漏洞

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. A Competitive Conditions Issue vulnerability exists in versions of JetBrains Hub prior to 2025.3.104432, which stems from the presence of a...

AlmaLinux 9 : runc (ALSA-2025:19927)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:19927 advisory. runc: container escape via 'masked path' abuse due to mount race conditions CVE-2025-31133 runc: container escape with malicious config due to /dev/conso...

container escape due to /dev/console mount and related races

...

runc container escape via "masked path" abuse due to mount race conditions

...

EUVD-2025-37944

runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting /dev/pts/$n to /dev/console inside the container, an attacker can...

EUVD-2025-37945

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount i.e., the container's /dev/null was...

CVE-2025-31133 runc container escape via "masked path" abuse due to mount race conditions

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount i.e., the container's /dev/null was...

Vulnerabilities fixed in Apple macOS

Apple has fixed vulnerabilities in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2 and macOS Tahoe 26.1. The vulnerabilities covered a wide range of issues, including unauthorized access to sensitive user data, race conditions, and logic flaws that could lead to unwanted access or system instability...

FreeBSD : Firefox -- Incorrect boundary conditions (af9c5b99-b808-11f0-8016-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the af9c5b99-b808-11f0-8016-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1979502 reports: Incorrect boundary conditions in the...

Astra Linux – Vulnerability in Firefox, Thunderbird

Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ppp: Fixed race conditions in pppfillforwardpath. pppfillforwardpath has two race conditions: 1. The ppp-channels list can change between listempty and listfirstentry, as ppplock is not held. If the only channel is deleted in...