AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that stems from insufficient validation of ACAP configuration file inputs, which could lead to path traversal attacks and elevation of privilege...

Zephyr security vulnerabilities

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr that stems from a contention condition in the entry point of a system call, which could lead to elevation of privilege by a malicious userspace process...

CVE-2025-12726

Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

CVE-2025-43723

Dell PowerScale OneFS, versions prior to 9.10.1.3 and versions 9.11.0.0 through 9.12.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

WebKit DoS

The vulnerability of the Web page rendering module in WebKit operating systems for iOS and iPadOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Data Compromise Component

The vulnerability of the Accessibility component in operating systems iOS and iPadOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

TZ Secure OS system Data Compromise

The vulnerability of the TZ Secure OS microprogramming system in embedded Qualcomm devices is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

iOS iPadOS Kernel DoS

The vulnerability of the kernel of iOS and iPadOS lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0674

Updates of 'lasso' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2025-4.0-0903

Updates of 'polkit', 'rubygem-yajl-ruby', 'curl', 'lasso' packages of Photon OS have been released...

Apple iOS and iPadOS Information Disclosure Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. An information disclosure vulnerability exists in Apple iOS and iPadOS, which stems from a logging issue that could be exploited by an attacker to disclose sensitive use...

Critical Photon OS Security Update - PHSA-2025-5.0-0674

Updates of 'lasso' packages of Photon OS have been released...

Apple iOS and iPadOS Logic Issues Insufficient Checks Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a logical issue with an insufficiently checked vulnerability that can be exploited by an attacker to view sensitive user information...

Apple macOS Sequoia Code Signature Limit Insufficiency Vulnerability

Apple macOS Sequoia is an operating system announced by Apple on June 10, 2024 at the WWDC24 developer conference. Apple macOS Sequoia suffers from an insufficient code signature restriction vulnerability that can be exploited by an attacker to access sensitive user data...

Apple iOS and iPadOS Improvements for Underchecked Vulnerabilities

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain an Improvement Check Insufficiency vulnerability that can be exploited by attackers to cause an application to monitor keystrokes without th...

PT-2025-45579

Domain 4.0 — Security Operations 28% 4.1 Hardening and baselines Secure baselines: establish, deploy, maintain A baseline is the documented minimum secure configuration every system of a given type must meet before production and keep meeting afterward. Sources are CIS Benchmarks, DISA STIGs, and...

GHSA-PWHC-RPQ9-4C8W vulnerabilities

Vulnerabilities for packages: kargo, newrelic-infrastructure-agent, trivy-operator, spegel, kubevela, cluster-api-helm-controller, buildkitd, manifest-tool, opa, kaniko, flux-helm-controller, fuse-overlayfs-snapshotter, kubescape-operator, ctop, cert-manager-cmctl, headlamp, osv-scanner, skaffold...

USN-7860-4: Linux kernel (Real-time) vulnerability

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7860-3 linux-fips, linux-aws-fips, inux-gcp-fips vulnerability

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

Photon OS 4.0: Binutils PHSA-2025-4.0-0901

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0901. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...