PAN-OS Packet Handler DoS

The vulnerability of the Packet Handler component in the PAN-OS operating system is related to insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow a attacker to cause a service failure by sending a continuous stream of specially created LLDP packets...

ROS-20260113-7385

A vulnerability in the drivers/net/ethernet/marvell/octeontx2/nic/otx2dmacflt.c component of the Linux operating system kernel is related to insufficient checking for unusual or exceptional states. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2023-54176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: stricter state check in mptcpworker As reported by Christoph, the mptcp protocol can run the worker when the relevant msk socket is in an unexpected stat...

F2FS truncate_node Heap Buffer Overflow DoS

The vulnerability of the truncatenode function in the fs/f2fs/node.c module of the F2FS file system support in Linux operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-43510

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in watchOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Tahoe 26.1, visionOS 26.1, tvOS 26.1, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, iOS 26.1 and iPadOS 26.1. A malicious application may cause unexpect...

CVE-2025-43510

Connected documents confirm CVE-2025-43510 is a Copy-on-Write bug in the XNU kernel used in a multi-stage DarkSword exploit chain. The iOS/iPadOS/macOS chain details stage 4: sandbox escape from GPU to mediaplaybackd via this kernel bug, enabling broader privilege escalation. The vulnerability af...

EUVD-2025-203138

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in watchOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Tahoe 26.1, visionOS 26.1, tvOS 26.1, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, iOS 26.1 and iPadOS 26.1. A malicious application may cause unexpect...

MGASA-2025-0325 Updated webkit2 packages fix security vulnerabilities

A website may be able to exfiltrate sensitive system information. Description: The issue was addressed through improved state checks - CVE-2025-13947. Processing maliciously crafted web content may lead to an unexpected process crash. Description: Multiple issues were addressed by disabling array...

fs btrfs Heap Buffer Overflow DoS

The vulnerability of the btrfsreplacefileextents function in the fs/btrfs/file.c module of the file system support for the Linux operating system is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SMB Client Heap Buffer Overflow DoS

The vulnerability of the cifsinitnetfs function in the fs/smb/client/cifsfs.c module of the SMB client support in Linux kernel involves insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-51006

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iOS versions prior to 26.1 iPadOS versions prior to 18.7.2 iPadOS versions prior to 26.1 macOS Sequoia versions prior to 15.7.2 macOS Sonoma versions prior to 14.8.2 macOS Tahoe versions prior to 26.1 tvOS versions...

EUVD-2020-20418

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987206)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987206 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.srcaddr outside state checks If the state is not idle then...

EUVD-2025-10262

Malicious code in bioql PyPI...

Linux umem_odp.c Heap Buffer Overflow DoS

The vulnerability of the umemodp.c component in the Linux operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...

Apexd Heap Buffer Overflow Privilege Escalation

The vulnerability of the VerifyNoOverlapInSessions function in the apexd.cpp file of the Android operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Mozilla Firefox GC Functions Compromise Data Compromise

Vulnerability of the JavaScript component: The GC functions of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to insufficient checking of unusual or exceptional states. Exploiting this vulnerability allows an attacker to compromise the confidentiality and...

Linux arch/arm64/boot/dts/qcom/x1e80100.dtsi Service

The vulnerability in the arch/arm64/boot/dts/qcom/x1e80100.dtsi file of the Linux operating system’s kernel is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to cause a service failure...

Nullsoft Scriptable Install System Privilege Escalation

The vulnerability of the Nullsoft Scriptable Install System development system is related to insufficient testing for unusual or exceptional states. Exploiting this vulnerability can allow attackers to enhance their privileges...

SUSE CVE-2025-39693

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference WHY Although unlikely drmatomicgetnewconnectorstate or drmatomicgetoldconnectorstate can return NULL. HOW Check returns before dereference. cherry picked from commit...