19878 matches found
KB5071543: Windows 10 Version 1607 / Windows Server 2016 Security Update (December 2025)
The remote Windows host is missing security update 5071543. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Heap-based buffer...
KB5071546: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (December 2025)
The remote Windows host is missing security update 5071546. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Out-of-bounds read ...
KB5071544: Windows 10 version 1809 / Windows Server 2019 Security Update (December 2025)
The remote Windows host is missing security update 5071544. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Out-of-bounds read ...
NiceGUI 安全漏洞
NiceGUI is an easy-to-use, Python-based UI framework open-sourced by NiceGUI. A security vulnerability exists in NiceGUI 3.3.1 and earlier versions, which stems from the ui.activeimage component not cleaning up SVG content, and could lead to cross-site scripting attacks...
KLA90817 Multiple vulnerabilities in Mozilla Thunderbird ESR
Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in the...
KLA90807 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Incorrect boundary conditions vulnerability in the Graphics...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from amdgpu not validating the offsetinbo of drmamdgpugemva, which could lead to out-of-bounds access...
PT-2025-49676
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/amdkfd subsystem that could lead to use-after-free UAF issues with kgd mem pointers. Specifically, pointers returned by the kfd process...
PT-2025-49728
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/msm subsystem related to snapshot tear down. Specifically, the deinitialization code can be invoked with a NULL kms pointer in scenarios involving...
KLA90808 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in the WebR...
KB5071506: Windows Server 2008 R2 Security Update (December 2025)
The remote Windows host is missing security update 5071506. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Heap-based buffer...
drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
...
drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
...
firefox: thunderbird: Race condition in the Graphics component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Race condition in the Graphics component...
firefox: thunderbird: Race condition in the Graphics component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Race condition in the Graphics component...
drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
...
Vulnerability of the xe_gt_init_early() function in the drivers/gpu/drm/xe/xe_gt.c module – The DRI driver for Linux kernel’s direct rendering infrastructure allows a hacker to trigger a service failure.
Vulnerability of the xegtinitearly function in the drivers/gpu/drm/xe/xegt.c module – The driver for Linux’s Direct Rendering Infrastructure DRI relies on pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2025-40277
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could...
Important: firefox
Issue Overview: Race condition in the Graphics component. This vulnerability affects Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30. CVE-2025-13012 Mitigation bypass in the DOM: Core & HTML component. This vulnerability affects Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30...
Vulnerability of the psb_gem_free_object() function in the drivers/gpu/drm/gma500/gem.c module – This driver is part of the Linux kernel’s Direct Rendering Infrastructure (DRI) support. It allows a malicious actor to cause a service failure.
Vulnerability of the psbgemfreeobject function in the drivers/gpu/drm/gma500/gem.c module – The Linux kernel’s DRI support driver has a vulnerability related to improper resource release. Exploiting this vulnerability could allow an attacker to cause service failures...