20640 matches found
SUSE-SU-2025:02795-1 Security update for cairo
This update for cairo fixes the following issues: - CVE-2019-6462: Fixed a potentially infinite loop bsc1122321...
ROS-20250814-09
A vulnerability in the SMM component of AMD graphics processor firmware is related to a insufficient flow control in AmdCpmOemSmm. Exploitation of the vulnerability could allow an attacker to escalate privileges on the system A vulnerability in the SMM component of AMD GPU firmware is associated...
The vulnerability of the Windows GDI+ interface on Windows operating systems allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.
The vulnerability of the Windows GDI+ interface on Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and execute arbitrary code by...
The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to gain unauthorized access to modify data or cause service failures.
The vulnerability of the NVIDIA GPU Display Driver software driver is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an intruder to gain unauthorized access to modify data or cause a service failure...
CVE-2025-55154
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been patched in...
GHSA-PWQ7-2GVJ-VG9V vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter, tensorflow-gpu-jupyter...
MAL-2025-6918 Malicious code in com.microsoft.mrtk.graphicstools.shadergraph.unity (npm)
The package communicates with a domain associated with malicious activity...
Denial Of Service (DoS)
SixLabors.ImageSharp is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of malformed GIF comment extension blocks due to a missing block terminator, causing the GIF decoder to enter an infinite loop when processing specially crafted files...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows, including Hyper-V, Graphics Component, and Routing and Remote Access Service RRAS. The vulnerabilities include several types of attacks, such as local privilege escalation, unwarranted access to sensitive information, and the potential for...
CVE-2025-8901
Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
ROS-20250813-11
A vulnerability in the SMM component of AMD GPU firmware is related to incorrect processing of some special address ranges with invalid entries in the device table DTE. device table entries DTE. Exploitation of the vulnerability could allow an attacker to escalate privileges on the system A...
Intel Graphics Advisory - Lenovo Support US
No description provided...
svg-sanitizer Bypasses Attribute Sanitization
Problem The sanitization logic at https://github.com/darylldoyle/svg-sanitizer/blob/0.21.0/src/Sanitizer.phpL454-L481 only searches for lower-case attribute names e.g. xlink:href instead of xlink:HrEf, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting...
GHSA-22WQ-Q86M-83FH svg-sanitizer Bypasses Attribute Sanitization
Problem The sanitization logic at https://github.com/darylldoyle/svg-sanitizer/blob/0.21.0/src/Sanitizer.phpL454-L481 only searches for lower-case attribute names e.g. xlink:href instead of xlink:HrEf, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting...
Microsoft Patch Tuesday for August 2025 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for August 2025, which includes 111 vulnerabilities affecting a range of products, including 13 that Microsoft marked as "critical". In this month's release, Microsoft observed none of the included vulnerabilities being actively exploited in the...
CVE-2025-53132
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-53132
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-50176
Access of resource using incompatible type 'type confusion' in Graphics Kernel allows an authorized attacker to execute code locally...