CVE-2025-10527

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10533

Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10528

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10536

Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

CVE-2025-10201

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2025-10200

Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

Malicious code in snap-score-increase013 (npm)

The package snap-score-increase013 was found to contain malicious code...

Malicious code in snap-score-meaning552 (npm)

The package snap-score-meaning552 was found to contain malicious code...

Malicious code in snap-score-points636 (npm)

The package snap-score-points636 was found to contain malicious code...

MAL-2025-46096 Malicious code in snap-score-meaning552 (npm)

The package snap-score-meaning552 was found to contain malicious code...

Malicious code in snap-score-points232 (npm)

The package snap-score-points232 was found to contain malicious code...

Malicious code in snap-score-increase387 (npm)

The package snap-score-increase387 was found to contain malicious code...

MAL-2025-46098 Malicious code in snap-score-points636 (npm)

The package snap-score-points636 was found to contain malicious code...

MAL-2025-46095 Malicious code in snap-score-increase387 (npm)

The package snap-score-increase387 was found to contain malicious code...

MAL-2025-46097 Malicious code in snap-score-points232 (npm)

The package snap-score-points232 was found to contain malicious code...

MAL-2025-46094 Malicious code in snap-score-increase013 (npm)

The package snap-score-increase013 was found to contain malicious code...

CVE-2025-7445

Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs...

CVE-2025-9866

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-9865

Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-9867

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...