Buoyant Edge 安全漏洞

Buoyant Edge is a Linkerd lightweight edge agent from Buoyant. A security vulnerability exists in Buoyant Edge versions prior to 25.2.1, which stems from the fact that metric data may consume a large amount of agent memory, leading to resource exhaustion...

PT-2025-21205

Name of the Vulnerable Software and Affected Versions Chromium versions prior to 136.0.7103.113 Description A high-severity vulnerability in Chromium allows remote attackers to leak cross-origin data via crafted HTML pages, potentially leading to full account takeover. The vulnerability is caused...

PT-2025-19728 · Buoyant · Buoyant Edge +1

Name of the Vulnerable Software and Affected Versions: Linkerd versions 2.16. through 2.16.4 Linkerd versions 2.17. through 2.17.1 Linkerd versions 2.18. no specific end version mentioned, but before 2.18.0 Buoyant Edge versions before edge-25.2.1 Description: Resource exhaustion can occur for...

CVE-2025-43915

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics...

CVE-2025-29825

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-29825

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-29825

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

SUSE CVE-2025-23141

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVMGETMPSTATE to protect guest memory accesses Acquire a lock on kvm-srcu when userspace is getting MP state to handle a rather extreme edge case where "accepting" APIC events, i.e. processing pending IN...

CVE-2025-29825 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2025-29825

CVE-2025-29825 affects Microsoft Edge (Chromium-based). The flaw is a UI misrepresentation that enables a remote attacker to spoof UI over a network, requiring user interaction. Impact per the metrics is Confidentiality High, with no impacts to Integrity/Availability reported. The CVSS 3.1 vector...

CVE-2025-29825 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

Microsoft Edge taskbar icon may not appear when it is launched through Local App Access

When Microsoft Edge is launched in an ICA desktop session through Local App Access LAA, Microsoft Edge icon may not appear in Windows taskbar of the session. In the situation, if end user makes a mouse click on the background Windows desktop in the session, the foreground Microsoft Edge window wi...

Adaptive Wizard for Removing Cross-Tier Misconfigurations in Active Directory

Security vulnerabilities in Windows Active Directory AD systems are typically modeled using an attack graph and hardening AD systems involves an iterative workflow: security teams propose an edge to remove, and IT operations teams manually review these fixes before implementing the removal. As...

Microsoft Edge (Chromium-Based) Spoofing Vulnerability (May 2025)

Microsoft Edge Chromium-Based is prone to a spoofing vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Edge (Chromium) < 136.0.3240.50 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 136.0.3240.50. It is, therefore, affected by multiple vulnerabilities as referenced in the May 1, 2025 advisory. - User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an...

Chromium: CVE-2025-4052 Inappropriate implementation in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-4051 Insufficient data validation in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-4050 Out of bounds memory access in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-4096 Heap buffer overflow in HTML

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2025-23141 KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVMGETMPSTATE to protect guest memory accesses Acquire a lock on kvm-srcu when userspace is getting MP state to handle a rather extreme edge case where "accepting" APIC events, i.e. processing pending IN...