Android happy to check your nudes before you forward them

Sometimes the updates we install to keep our devices safe do a little bit more than we might suspect at first glance. Take the October 2024 Android Security Bulletin. It included a new service called Android System SafetyCore. If you can find a mention of that in the security bulletin, you’re a...

The vulnerability of the Core Messaging component in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Core Messaging component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

BIT-DISCOURSE-2024-56197 Users can see other user's tagged PMs in Discourse

Discourse is an open source platform for community discussion. PM titles and metadata can be read by other users when the "PM tags allowed for groups" option is enabled, the other user is a member of a group added to this option, and the PM has been tagged. This issue has been patched in the late...

The vulnerability of the XMPP protocol (Extensible Messaging and Presence Protocol), which is used by the Jitsi Meet video conferencing software, allows a hacker to disclose meeting passwords.

The vulnerability of the Jitsi Meet software, a video conferencing solution based on the XMPP protocol, is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow a malicious actor to retrieve meeting passwords through HTTP POST requests...

CVE-2025-21414

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-21184

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-21358

Windows Core Messaging Elevation of Privileges Vulnerability...

The vulnerability of the Core Messaging service in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Core Messaging service in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

thunderbird: Unsanitized address book fields

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For...

CVE-2025-21414

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-21414

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-21358

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-21358

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-21184

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-21184

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-21414 Windows Core Messaging Elevation of Privileges Vulnerability

...

CVE-2025-21414 Windows Core Messaging Elevation of Privileges Vulnerability

...

CVE-2025-21414

CVE-2025-21414 is associated with Windows Core Messaging and is listed in a vulnerability roundup as an Elevation of Privilege risk, with the AVLEONOV source explicitly grouping it under EoP for Windows Core Messaging. The connected materials confirm the affected component (Windows Core Messaging...

CVE-2025-21184 Windows Core Messaging Elevation of Privileges Vulnerability

...

CVE-2025-21184

CVE-2025-21184 is an Elevation of Privilege issue affecting Windows Core Messaging. The connected AVLEONOV article identifies it as EoP in Windows Core Messaging and lists it among February Patch Tuesday CVEs. Provided documents do not include a vendor/product version, root cause, exploit details...