The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the NVIDIA GPU Display Driver, related to incorrect authorization, allows a hacker to escalate their privileges.

The vulnerability of the NVIDIA GPU Display Driver is related to incorrect authorization. Exploiting this vulnerability can allow an attacker to increase their privileges...

Vulnerability of components such as drivers, GPU, DRM, AMD, and Display in the Linux operating system, which allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of components such as drivers, GPU, DRM, AMD, and Display in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the DRM/AMD/PM components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMD/PM components in the Linux operating system is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

The vulnerability of components such as drivers, GPU, DRM, and XE in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/gpu/drm/xe components of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/gpu/drm/imagination components of the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the drivers/gpu/drm/imagination components of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of components such as drivers, GPU, DRM, and VKMS in the Linux operating system allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of components such as drivers, GPU, DRM, and VKMS in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Researchers Expose Phishing Threats Distributing CountLoader and PureRAT

A new campaign has been observed impersonating Ukrainian government agencies in phishing attacks to deliver CountLoader , which is then used to drop Amatera Stealer and PureMiner. "The phishing emails contain malicious Scalable Vector Graphics SVG files designed to trick recipients into opening...

CVE-2025-11027 givanz Vvveb SVG File cross site scripting

A vulnerability was identified in givanz Vvveb up to 1.0.7.2. Affected by this issue is some unknown functionality of the component SVG File Handler. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used. Once aga...

Malicious code in com.unity.test-framework.graphics.performance (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47642 Malicious code in com.unity.test-framework.graphics.performance (npm)

--- -= Per source details. Do not edit below this line.=-...

The vulnerabilities of the Guest driver and Virtual GPU Manager drivers of NVIDIA graphics processors allow attackers to exploit them to disclose protected information.

The vulnerability of the Guest driver components and the Virtual GPU Manager driver of NVIDIA graphics processors is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of AMD’s microprogramming software for graphics processors allows attackers to exploit their privileges.

The vulnerability of the SMM microprogramming system software for AMD graphics processors is related to insufficient control over the flow of execution in AmdCpmOemSmm. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of AMD’s microprogramming software for graphics processors allows attackers to exploit their privileges.

The vulnerability of the SMM microprogramming system software for AMD graphics processors is related to insufficient control over the flow of execution in AmdCpmOemSmm. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-59525

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, improper sanitization across the application allows XSS via uploaded SVG and via allowed , which can be chained to execute JavaScript whenever users view impacted content e.g., announcements. This can...

CVE-2025-10909

A security flaw has been discovered in Mangati NovoSGA up to 2.2.9. The impacted element is an unknown function of the file /admin of the component SVG File Handler. Performing manipulation of the argument logoNavbar/logoLogin results in cross site scripting. Remote exploitation of the attack is...

New SVG-based phishing campaign is a recipe for disaster

We've written in the past about cybercriminals using SVG files for phishing and for clickjack campaigns. We found a new, rather sophisticated example of an SVG involved in phishing. For readers that missed the earlier posts, SVG files are not always simply image files. Because they are written in...

Nextcloud: Stored XSS Vulnerability via SVG File

A stored XSS vulnerability was discovered in Nextcloud related to the handling of SVG files. The vulnerability allowed the execution of arbitrary JavaScript code...

USN-7774-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...