RUSTSEC-2025-0071 Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal

Affected versions of this crate did not correctly strip namespace-incompatible tags in certain situations, causing it to incorrectly account for differences between HTML, SVG, and MathML. This vulnerability only has an effect when the svg or math tag is allowed, because it relies on a tag being...

drm/amd/display: Prevent crash when disable stream

...

CVE-2025-59216

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-59215

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-59417

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.129.4, there is a a cross-site scripting XSS vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. In lobe-chat, when the response from the...

drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()

...

drm/amd/display: Skip on writeback when it's not applicable

...

SUSE CVE-2023-53388

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Clean dangling pointer on bind error path mtkdrmbind can fail, in which case drmdevput is called, destroying the drmdevice object. However a pointer to it was still being held in the private object, and that pointer...

CVE-2025-23337

NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller HMC that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service,...

CVE-2025-59415

Frappe Learning is a learning system that helps users structure their content. In versions 2.34.1 and below, there is a security vulnerability in Frappe Learning where the system did not adequately sanitize the content uploaded in the profile bio. Malicious SVG files could be used to execute...

Vulnerability of the Graphics component: Canvas2D in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allowing attackers to execute arbitrary code.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Linux Distros Unpatched Vulnerability : CVE-2022-50368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/dsi: fix memory corruption with too many bridges Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized brid...

The vulnerability of Intel Graphics Driver drivers lies in the improper use of standard resolutions, which allows attackers to increase their privileges.

The vulnerability of Intel Graphics Driver drivers is related to the incorrect use of standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...

SUSE CVE-2023-53378

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Treat the DPT BO as a framebuffer Currently i915gemobjectisframebuffer doesn't treat the BO containing the framebuffer's DPT as a framebuffer itself. This means eg. that the shrinker can evict the DPT BO while leavi...

CVE-2025-59215

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-59215

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-59216

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-59216

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-59216 Windows Graphics Component Elevation of Privilege Vulnerability

...

CVE-2025-59216

CVE-2025-59216 concerns Microsoft Graphics Component, a graphics driver component. The vulnerability arises from a race-condition caused by improper synchronization when accessing a shared resource, enabling a local attacker with low privileges to elevate privileges. Public sources describe the i...