The vulnerability of the sunrpc component in the Linux operating system’s kernel allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the sunrpc component in the Linux operating system’s kernel relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...

The vulnerability in the drivers/iommu/amd/init.c component of the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability in the drivers/iommu/amd/init.c component of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of the do_register_framebuffer() function in the fbdev/core/fbmem.c file of the Linux kernel allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the doregisterframebuffer function in the fbdev/core/fbmem.c file of the Linux kernel relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of the spi component in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the spi component in the Linux operating system’s kernel involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the rseq.c component in the Linux operating system’s kernel allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the rseq.c component in the Linux operating system’s kernel is related to its dependence on unreliable input data during security decision-making. Exploiting this vulnerability allows attackers to compromise the confidentiality and accessibility of protected information...

The vulnerability of the implementation of the Web Map Service (WMS) protocol in the software for managing and publishing geospatial data on the OSGeo GeoServer server allows a perpetrator to disclose protected information and cause service failures.

The vulnerability of the Web Map Service WMS protocol implementation in the software for managing and publishing geospatial data on the OSGeo GeoServer server is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the SSH-server for the Go programming language library allows a perpetrator to compromise the accessibility of protected information.

The vulnerability of the SSH-server for the Go programming language library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

The vulnerability of the video_get_user() function in the drivers/media/v4l2-core/v4l2-ioctl.c file of the Linux kernel’s multimedia device support driver allows a hacker to gain access to protected information.

The vulnerability of the videogetuser function in the drivers/media/v4l2-core/v4l2-ioctl.c file of the Linux kernel’s multimedia device support driver module is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to access protected information...

The vulnerability of the vc_do_resize() function in the drivers/tty/vt/vt.c file of the TTY console support driver for the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the vcdoresize function in the drivers/tty/vt/vt.c file of the TTY console support driver in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the usdGltf plugin in Adobe Format Plugins allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the usdGltf plugin relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

EUVD-2025-178862

Malicious code in fork-object-protected-data-fork npm...

Malicious code in fork-object-protected-data-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d731ebcdace439a4ad52b59008be2f09ab2a515b808c75fbd971d22501b85805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

The vulnerability of the kvm_lapic_reg_read() function in the arch/x86/kvm/lapic.c module of the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the kvmlapicregread function in the arch/x86/kvm/lapic.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-43395

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43394

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access protected user data...

CVE-2025-43394

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43395

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access protected user data...

CVE-2025-43379

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access protected user data...

CVE-2025-43394

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43399

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access protected user data...