thread-amount Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOS

Affected versions of this crate contain resource leaks when querying thread counts on Windows and Apple platforms. Windows The threadamount function calls CreateToolhelp32Snapshot but fails to close the returned HANDLE using CloseHandle. Repeated calls to this function will cause the handle count...

GHSA-JF9P-2FV9-2JP2 thread-amount Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOS

Affected versions of this crate contain resource leaks when querying thread counts on Windows and Apple platforms. Windows The threadamount function calls CreateToolhelp32Snapshot but fails to close the returned HANDLE using CloseHandle. Repeated calls to this function will cause the handle count...

PT-2025-47800

Name of the Vulnerable Software and Affected Versions AWS Wickr versions prior to 6.62.13 Description A flaw exists in the call termination process that may allow a call participant to continue receiving audio input from another user after closing their call window. This issue occurs in AWS Wickr...

Blockchain and Node.js abused by Tsundere: an emerging botnet

Introduction Tsundere is a new botnet, discovered by our Kaspersky GReAT around mid-2025. We have correlated this threat with previous reports from October 2024 that reveal code similarities, as well as the use of the same C2 retrieval method and wallet. In that instance, the threat actor created...

Google Chrome < 4.1.0.21 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 4.1.0.21. It is, therefore, affected by multiple vulnerabilities as referenced in the 201503stable-channel-update advisory. - Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM...

Google Chrome < 19.0.0.245 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 19.0.0.245. It is, therefore, affected by a vulnerability as referenced in the 201511stable-channel-update advisory. - The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and...

Google Chrome < 54.0.2840.100 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 54.0.2840.100. It is, therefore, affected by multiple vulnerabilities as referenced in the 201611stable-channel-update-for-desktop9 advisory. - browser/extensions/api/dial/dialregistry.cc in Google Chrome before...

Google Chrome < 140.0.7339.207 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 140.0.7339.207. It is, therefore, affected by multiple vulnerabilities as referenced in the 202509stable-channel-update-for-desktop23 advisory. - Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a...

Google Chrome < 122.0.6261.128 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 122.0.6261.128. It is, therefore, affected by a vulnerability as referenced in the 202403stable-channel-update-for-desktop12 advisory. - Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allow...

Google Chrome < 53.0.2785.92 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 53.0.2785.92. It is, therefore, affected by multiple vulnerabilities as referenced in the 201608stable-channel-update-for-desktop31 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 o...

Google Chrome < 83.0.4103.88 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 83.0.4103.88. It is, therefore, affected by multiple vulnerabilities as referenced in the 202006stable-channel-update-for-desktop advisory. - Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97...

Google Chrome < 62.0.3202.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 62.0.3202.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201710stable-channel-update-for-desktop26 advisory. - A stack buffer overflow in V8 in Google Chrome prior to 62.0.3202.75 allowed ...

Google Chrome < 4.9.385.33 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 4.9.385.33. It is, therefore, affected by multiple vulnerabilities as referenced in the 201603stable-channel-update24 advisory. - The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in...

Google Chrome < 123.0.6312.58 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 123.0.6312.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 202403stable-channel-update-for-desktop19 advisory. - Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a...

Google Chrome < 4.9.385.26 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 4.9.385.26. It is, therefore, affected by multiple vulnerabilities as referenced in the 201603stable-channel-update advisory. - Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to...

Google Chrome < 123.0.6312.86 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 123.0.6312.86. It is, therefore, affected by multiple vulnerabilities as referenced in the 202403stable-channel-update-for-desktop26 advisory. - Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed ...

Google Chrome < 67.0.3396.79 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 67.0.3396.79. It is, therefore, affected by a vulnerability as referenced in the 201806stable-channel-update-for-desktop advisory. - Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396....

CVE-2025-34324

GoSign Desktop versions 2.4.0 and earlier use an unsigned update manifest for distributing application updates. The manifest contains package URLs and SHA-256 hashes but is not digitally signed, so its authenticity relies solely on the underlying TLS channel. In affected versions, TLS certificate...

Mac users warned about new DigitStealer information stealer

A new infostealer called DigitStealer is going after Mac users. It avoids detection, skips older devices, and steals files, passwords, and browser data. We break down what it does and how to protect your Mac. Researchers have described a new malware called DigitStealer that steals sensitive...

Wireshark 4.6.x < 4.6.1 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.1 advisory. - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service CVE-2025-13499 No...