The vulnerability in the WasmToJSException script of the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, visionOS, and watchOS allows attackers to execute arbitrary code and trigger a service failure.

The vulnerability of the WasmToJSException script in Safari browsers on macOS, iOS, iPadOS, tvOS, visionOS, and watchOS is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures within the browser context...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in its unlimited resource distribution, which allows a hacker to cause a service failure.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The Semiconductor Industry and Regulatory Compliance

Earlier this week, the Trump administration narrowed export controls on advanced semiconductors ahead of US-China trade negotiations. The administration is increasingly relying on export licenses to allow American semiconductor firms to sell their products to Chinese customers, while keeping the...

CVE-2025-54621

Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures...

CVE-2025-54621

Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures...

CVE-2025-54621

Huawei HarmonyOS exposed vulnerability in the WantAgent module (iterator failure) that may cause memory release failures. Affected component: WantAgent in HarmonyOS; root cause described as an iterator failure within the module. Documented impact: possible memory release failure if exploited. Exp...

PT-2025-32028 · Wantagent · Wantagent

Name of the Vulnerable Software and Affected Versions: WantAgent affected versions not specified Description: An iterator failure issue exists within the WantAgent module, potentially leading to memory release failures upon successful exploitation. Recommendations: At the moment, there is no...

PT-2025-32026 · Iterator · Iterator

Name of the Vulnerable Software and Affected Versions: Iterator affected versions not specified Description: An iterator failure issue exists in the multi-mode input module. Successful exploitation may cause iterator failures and affect availability. Recommendations: At the moment, there is no...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility lies in insufficient validation of input data, allowing a hacker to trigger a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a hacker to cause service interruptions...

PT-2025-31774 · Undefined · Undefined

hey @Microsoft when Defender started scanning for non-malicious documents like pandemic compliance forms, it crossed from security into behavioral monitoring. Microsoft's transparency failures around this documented in CVE-2020-16883 validated many professionals' concerns...

WordPress Auteur Framework plugin <= 7.1 - Missing Authorization to Authenticated (Subscriber+) Settings Updates vulnerability

Missing Authorization to Authenticated Subscriber+ Settings Updates vulnerability discovered by Lucio Sá in WordPress Plugin Auteur Framework versions = 7.1...

The vulnerability of components such as EAI and UI (Oxygen XML WebHelp) in the Oracle Siebel CRM system for managing customer relationships allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the EAI and UI Oxygen XML WebHelp components of the Oracle Siebel CRM system relates to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability in the drivers/dma/idxd/cdev.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/dma/idxd/cdev.c module of Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause system failures...

The vulnerability of the network traffic analysis, network detection, and response tool Palo Alto Networks Cortex XDR Agent, related to the handling of the zero pointer, allows attackers to trigger a service failure.

The vulnerability of the Palo Alto Networks Cortex XDR Agent, which is used for network traffic analysis, network detection, and response, relates to the handling of the zero pointer. Exploiting this vulnerability could allow attackers to trigger service failures...

The vulnerability of the device management platform for heating, ventilation, and air conditioning systems, lighting, and energy consumption control within the Niagara Framework, along with the Niagara Enterprise Security tools for access control and security, can be exploited due to improper handling of argument separators in commands. This allows attackers to trigger service failures.

The vulnerability of the device management platform for heating, ventilation, and air conditioning systems, lighting, and energy consumption control within the Niagara Framework, along with the access control and security measures, is related to improper elimination of argument separators in the...

The vulnerability of the btrfs_endTransaction.transaction() function in Linux operating system kernels, which allows a hacker to trigger a service failure

The vulnerability of the btrfsendTransactionTransaction function in Linux operating system kernels is related to incorrect handling of elements of the free space tree during reconstitution. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerabilities in the drivers/gpu/drm/v3d/v3d_drv.h modules, drivers/gpu/drm/v3d/v3d_gem.c file, and drivers/gpu/drm/v3d/v3d_irq.c file of Linux operating system kernels allow a hacker to cause service failures.

The vulnerabilities in the drivers/gpu/drm/v3d/v3ddrv.h modules, drivers/gpu/drm/v3d/v3dgem.c, and drivers/gpu/drm/v3d/v3dirq.c files of Linux operating systems are related to pointer manipulation. Exploiting these vulnerabilities can allow attackers to cause system failures...

The vulnerability of the snd_usbmidi_free() function in the sound/usb/midi.c module of operating system kernels in Linux allows a hacker to cause a service failure.

The vulnerability of the sndusbmidifree function in the sound/usb/midi.c module of Linux kernel systems is related to improper initialization of the resource. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Redis database management system, related to uncontrolled memory allocation, allows attackers to trigger service failures.

The vulnerability of the Redis database management system is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...