CVE-2025-11233 Rust standard library didn't detect all path separators on Cygwin

Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...

PT-2025-40278

Name of the Vulnerable Software and Affected Versions Rust versions 1.87.0 through 1.88.9 Description The standard library’s Path API did not correctly handle path separators on the tier 3 Cygwin target x86 64-pc-cygwin in versions prior to 1.89.0. This caused the API to ignore path components...

CVE-2025-59821: Improper Neutralization of Input During Web Page Generation

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

CVE-2022-50392 ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe()

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8183: fix refcount leak in mt8183mt6358ts3a227max98357devprobe The node returned by ofparsephandle with refcount incremented, ofnodeput needs be called when finish using it. So add it in the error path in...

CVE-2025-43370

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2022-50361 wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init()

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: add missing unregisternetdev in wilcnetdevifcinit Fault injection test reports this issue: kernel BUG at net/core/dev.c:10731! invalid opcode: 0000 1 PREEMPT SMP KASAN PTI Call Trace: wilcnetdevifcinit+0x19f/0x220...

CVE-2025-43370

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2025-43370

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2025-43370

The Xcode integrated development environment for macOS operating systems contains a path handling vulnerability in its Dev Tools component. The root cause is the copying of buffers without sufficient validation of the input data size (CWE-120). An attacker can exploit this by providing an overly ...

CVE-2025-43370

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2025-43370

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

CVE-2022-50267 mmc: rtsx_pci: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: rtsxpci: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...

PT-2025-37856

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 26 Description A path handling issue was addressed with improved validation. Processing an overly large path value may crash a process. Recommendations Update to Xcode version 26...

CVE-2025-43370: Buffer Copy without Checking Size of Input

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...

MoneyPrinterTurbo path traversal vulnerability

MoneyPrinterTurbo is a software by Harry's personal developer that generates short HD videos using AI macromodels. A path traversal vulnerability exists in MoneyPrinterTurbo 1.2.6 and earlier versions, which stems from a misuse of the parameter filepath in the file app/controllers/v1/video.py,...

Apple macOS security vulnerabilities

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from improper handling of directory paths, which could cause an application to gain root privileges. The following...

Apple macOS security vulnerabilities

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from improper handling of directory paths, which could lead to applications accessing sensitive user data. The followin...

About the security content of Xcode 26

About the security content of Xcode 26 This document describes the security content of Xcode 26. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

Azure Connected Machine Agent Privilege Escalation

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to increase their privileges...

OESA-2025-2257 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...