15860 matches found
PT-2025-7435 · Kernel · Kernel
Name of the Vulnerable Software and Affected Versions: Kernel software affected versions not specified Description: The issue concerns kernel software installed and running inside a Guest VM, which may post improper commands to the GPU Firmware. This can trigger a write of data outside the Guest'...
PT-2025-7471
Name of the Vulnerable Software and Affected Versions Abseil-cpp versions prior to commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1 Description A heap buffer overflow issue exists due to the lack of an upper bound on size arguments in the sized constructors, reserve, and rehash methods of...
PT-2025-25835
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel. The issue is related to the pktgen thread write function, where access outside of a user-given buffer occurred. The fix involves...
[SECURITY] [DLA 4059-1] mosquitto security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4059-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA February 20, 2025 https://wiki.debian.org/LTS -...
CVE-2025-26603
A flaw was found in Vim's :redir command. This vulnerability allows a use-after-free condition via redirecting the :display command to a clipboard register or +, which allows access to freed memory. Mitigation Mitigation for this issue is either not available or the currently available options do...
CVE-2025-0633
Heap-based Buffer Overflow vulnerability in iniparserdumpsectionini in iniparser allows attacker to read out of bound memory...
CVE-2025-1118
A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory...
The vulnerability of the lib/generic-radix-tree.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the lib/generic-radix-tree.c component in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-47222: net: bridge: fix vlan tunnel dst refcnt when egressing bsc1224857. CVE-2021-47223: net: bridge: fix vlan tunnel dst null pointer dereference bsc1224856...
Linux kernel zram_meta_alloc function resource management error vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in the Linux kernel that stems from the zrammetaalloc function not setting zram-table to NULL on allocation failure, which can ...
CVE-2025-0998
Rejected reason: Not exploitable...
CVE-2025-0998
CVE-2025-0998 is described in connected advisories as a vulnerability in Chromium/Google Chrome related to an out-of-bounds memory access in V8 . Multiple sources confirm the affected product as Chromium/Chrome, with Debian’s security advisory DSA-5866-1 explicitly listing CVE-2025-0998 among Chr...
SUSE CVE-2023-29531
An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. This bug only affects Firefox and Thunderbird for macOS. Other operating systems are unaffected. This vulnerability affects Firefox 112, Firefox ESR...
Microsoft Edge (Chromium) < 133.0.3065.69 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 133.0.3065.69. It is, therefore, affected by multiple vulnerabilities as referenced in the February 14, 2025 advisory. - Microsoft Edge Chromium-based Security Feature Bypass Vulnerability CVE-2025-21401 - Use after fr...
The vulnerability of the Vim text editor, related to reading beyond the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
chromium -- multiple security fixes
Chrome Releases reports: This update includes 4 security fixes: 391907159 High CVE-2025-0995: Use after free in V8. Reported by Popax21 on 2025-01-24 391788835 High CVE-2025-0996: Inappropriate implementation in Browser UI. Reported by yuki yamaoto on 2025-01-23 391666328 High CVE-2025-0997: Use...
Google Chrome < 133.0.6943.98 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 133.0.6943.98. It is, therefore, affected by multiple vulnerabilities as referenced in the 202502stable-channel-update-for-desktop12 advisory. - Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed...
Stable Channel Update for Desktop
The Stable channel has been updated to 133.0.6943.98/.99 for Windows, Mac and 133.0.6943.98 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...