The vulnerability of the Windows File Explorer driver on Windows operating systems, allowing attackers to exploit their privileges

The vulnerability of the Windows File Explorer driver in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Microsoft DWM Core Library on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Qnap QTS and QuTS hero Out-of-Bounds Write (CVE-2025-30273)

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.5.314...

Microsoft Projected File System 安全漏洞

Microsoft Projected File System is an application system from Microsoft USA. It projects hierarchical data into the file system so that it appears as files and directories in the file system. A security vulnerability exists in Microsoft Projected File System. An attacker could exploit the...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-30268)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. A privilege...

The vulnerability of the Safari browser in iOS, iPadOS, and VisionOS operating systems, related to reading beyond the buffer limit of memory, allows attackers to trigger a service failure.

The vulnerability of the Safari browser in iOS, iPadOS, and VisionOS operating systems is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted HTML page...

The vulnerability of the WebKit component in iOS operating systems, iPadOS, VisionOS, WatchOS, and the Safari browser allows a perpetrator to trigger a service failure.

The vulnerability of the WebKit component in iOS, iPadOS, visionOS, watchOS operating systems, and the Safari browser is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2025-58436: Uncontrolled Resource Consumption

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue...

CVE-2025-43374

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.5, visionOS 2.5, watchOS 11.5. An attacker in physical proximity may be able to cause an...

CVE-2025-43374

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, visionOS 2.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, macOS Sequoia 15.5, watchOS 11.5. An attacker in physical proximity may be able to cause an out-of-bounds rea...

The vulnerability of the Windows Speech component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Speech component in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

IBM Db2 Denial of Service Vulnerability (CNVD-2025-29174)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...

The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to the delegation of untrusted pointers. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of operating systems such as tvOS, iOS, iPadOS, macOS, watchOS, and visionOS lies in insufficient checking of unusual or exceptional states, allowing attackers to trigger service failures.

The vulnerability of operating systems such as tvOS, iOS, iPadOS, macOS, watchOS, and visionOS is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Microsoft Windows Common Log File System Driver 缓冲区错误漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A buffer error...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

CVE-2025-43432

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packag...

CVE-2025-43345

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...