CVE-2025-68334

The CVE-2025-68334 entry describes a Linux kernel issue in platform/x86/amd/pmc related to Van Gogh SoC support. The root cause is a missing handler for the Xbox Ally/Van Gogh-like suspend path, which prevents proper S3/S0ix transitions and leads to the AMD GPU driver crash during resume due to a...

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

What Does it Take to Manage Cloud Risk?

Learn why hybrid and multi-cloud environments are vital for IT and business success from our 2025 Trend Micro Defenders Survey...

The vulnerability of the TEE SOC microprogramming software driver for AMD processors allows a hacker to trigger a service failure.

The vulnerability of the TEE SOC microprogramming software driver for AMD processors is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-62349: Added minimumauthversion to enforce security bsc1254257 CVE-2025-62348: Fixed Junos module yaml loader bsc1254256 Backport security fixes for vendored tornado BDSA-2024-3438 BDSA-2024-3439 BDSA-2024-9026 Other...

What Cyber Defenders Really Think About AI Risk

Learn how Trend Micro's 2025 Trend Micro Defenders Survey Report highlights current AI-related cybersecurity priorities and where security professionals use AI to their advantage...

PT-2025-51801

Name of the Vulnerable Software and Affected Versions MSI Motherboard affected versions not specified Description Certain MSI motherboard models are affected by a Protection Mechanism Failure. The issue stems from IOMMU not being properly enabled, allowing unauthenticated physical attackers to...

Trend Micro Cleaner One Pro Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Junk...

EUVD-2025-203701

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add missing terminator for zen5rdseedmicrocode Running x86matchminmicrocoderev on a Zen5 CPU trips up KASAN for an out of bounds access...

CVE-2025-40354 drm/amd/display: increase max link count and fix link->enc NULL pointer access

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link-enc NULL pointer access why 1. dc-linksMAXLINKS array size smaller than actual requested. maxconnector + maxdpia + 4 virtual = 14. increase from 12 to 14. 2. hwinit access nul...

EUVD-2025-203512

Malicious code in example-vue2-micro npm...

Malicious Package

Overview example-vue2-micro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in example-vue2-micro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cda06e9583d6e3b61afb6f1134f4d867559022d5844de0fbb5781312b8d5abc The package example-vue2-micro was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192590 Malicious code in example-vue2-micro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cda06e9583d6e3b61afb6f1134f4d867559022d5844de0fbb5781312b8d5abc The package example-vue2-micro was found to contain malicious code. Source: ghsa-malware...

Linux Distros Unpatched Vulnerability : CVE-2025-68313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 at a rat...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/amd/display components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows a perpetrator to cause service failures...

EUVD-2025-203308

A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7microclient.cpp. Executing manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be us...

CVE-2025-14672

A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7microclient.cpp. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be...

CVE-2025-14672 gmg137 snap7-rs s7_micro_client.cpp opWriteArea heap-based overflow

A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7microclient.cpp. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be...

CVE-2025-14672 gmg137 snap7-rs s7_micro_client.cpp opWriteArea heap-based overflow

A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7microclient.cpp. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be...