20625 matches found
Firefox -- Sandbox escape due to integer overflow
https://bugzilla.mozilla.org/showbug.cgi?id=1987246 reports: Sandbox escape due to integer overflow in the Graphics: Canvas2D component...
Firefox -- Sandbox escape
[email protected] reports: Sandbox excape due to integer overflow in the Graphics: Canvas2D component...
NewStart CGSL MAIN 6.06 : cups Multiple Vulnerabilities (NS-SA-2025-0218)
The remote NewStart CGSL host, running version MAIN 6.06, has cups packages installed that are affected by multiple vulnerabilities: - ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to...
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache XML Graphics FOP (CVE-2024-28168)
Summary A vulnerability in Apache XML Graphics FOP that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-28168 DESCRIPTION: Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apac...
Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security
Microsoft is calling attention to a new phishing campaign primarily aimed at U.S.-based organizations that has likely utilized code generated using large language models LLMs to obfuscate payloads and evade security defenses. "Appearing to be aided by a large language model LLM, the activity...
Linux Distros Unpatched Vulnerability : CVE-2025-23274
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with...
The vulnerability of the drivers/gpu/host1x components of the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the drivers/gpu/host1x components of the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
SVG Security Analysis Toolkit
SVG Security Analysis Toolkit contains specialized Python tools for analyzing potentially malicious SVG files and detecting security mechanisms...
The vulnerability of the NVIDIA GPU Display Driver, related to incorrect authorization, allows a hacker to escalate their privileges.
The vulnerability of the NVIDIA GPU Display Driver is related to incorrect authorization. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Graphics component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Graphics component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the DRM/AMD/PM components in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the DRM/AMD/PM components in the Linux operating system is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
Vulnerability of components such as drivers, GPU, DRM, AMD, and Display in the Linux operating system, which allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of components such as drivers, GPU, DRM, AMD, and Display in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of components such as drivers, GPU, DRM, and XE in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drivers/gpu/drm/xe components of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of components such as drivers, GPU, DRM, and VKMS in the Linux operating system allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of components such as drivers, GPU, DRM, and VKMS in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the drivers/gpu/drm/imagination components of the Linux operating system, which allows a hacker to trigger a service failure.
The vulnerability of the drivers/gpu/drm/imagination components of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
Researchers Expose Phishing Threats Distributing CountLoader and PureRAT
A new campaign has been observed impersonating Ukrainian government agencies in phishing attacks to deliver CountLoader , which is then used to drop Amatera Stealer and PureMiner. "The phishing emails contain malicious Scalable Vector Graphics SVG files designed to trick recipients into opening...
CVE-2025-11027 givanz Vvveb SVG File cross site scripting
A vulnerability was identified in givanz Vvveb up to 1.0.7.2. Affected by this issue is some unknown functionality of the component SVG File Handler. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used. Once aga...
