CVE-2025-30506: Uncontrolled Search Path Element

Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...

CVE-2025-24842: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR System Support Utility before version 4.1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may...

PT-2025-46394

Name of the Vulnerable Software and Affected Versions IntelR System Support Utility versions prior to 4.1.0 Description An uncontrolled search path exists in the IntelR System Support Utility. This issue, present within Ring 3: User Applications, may allow an escalation of privilege. A local,...

PT-2025-46415

Name of the Vulnerable Software and Affected Versions Intel Driver and Support Assistant versions prior to 25.2 Description An uncontrolled search path exists in some Intel Driver and Support Assistant versions before 25.2 within Ring 3 User Applications, potentially allowing an escalation of...

Mozilla Firefox and Mozilla Firefox ESR security vulnerabilities

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A code execution vulnerability exists in Mozilla Firefox and Firefox ESR due to a race condition in the Graphics component that can be exploited by an attacker to execute...

Mozilla Firefox and Mozilla Firefox ESR security vulnerabilities

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A code execution vulnerability exists in Mozilla Firefox and Firefox ESR, which stems from a post-release reuse issue in the Audio/Video component, and can be exploited by an...

Mozilla Firefox and Mozilla Firefox ESR security vulnerabilities

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by attackers to bypass security restrictions...

Mozilla Firefox and Mozilla Firefox ESR security vulnerabilities

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A code execution vulnerability exists in Mozilla Firefox and Firefox ESR, which is caused by a WebRTC Audio/Video component reuse after release issue, and can be exploited by a...

Mozilla Firefox and Mozilla Firefox ESR security vulnerabilities

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR due to a same-origin policy bypass in the DOM:Workers component. An attacker can exploit this...

Mozilla Firefox and Mozilla Firefox ESR security vulnerabilities

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by attackers to bypass security restrictions...

Intel System Support Utility for Windows code-related vulnerabilities

Intel System Support Utility for Windows is a Windows platform-based system support utility from Intel Corporation USA. The program is mainly used to identify the hardware model, operating system version, and software installed on the computer. A code issue vulnerability exists in Intel System...

Intel Driver and Support Assistant code-related vulnerabilities

Intel Driver and Support Assistant is an Intel Driver and Support Assistant application from Intel Corporation USA. The program is primarily used to detect and install system driver updates. A code issue vulnerability exists in Intel Driver and Support Assistant DSA versions prior to 25.2 that...

PT-2025-46356

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 145 Mozilla Firefox ESR versions prior to 140.5 Thunderbird versions prior to 145 Thunderbird versions prior to 140.5 Mozilla Firefox ESR versions prior to 140.5.0esr-1deb11u1 Mozilla Firefox ESR versions prio...

CVE-2025-32038: Uncontrolled Search Path Element

Uncontrolled search path for some FPGA Support Package for the Intel oneAPI DPC++C++ Compiler software before version 2025.0.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack m...

PT-2025-46360

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Firefox ESR versions prior to 140.5 Description A use-after-free issue exists in the WebRTC Audio/Video component. This can potentially allow for unexpected behavior or crashes. Recommendations Update Firefox to...

PT-2025-46358

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Firefox ESR versions prior to 140.5 Description A mitigation bypass exists in the DOM Security component of Firefox. This issue could allow a bypass of security mitigations. Recommendations Update Firefox to versi...

Mozilla Firefox ESR < 140.5

The version of Firefox ESR installed on the remote Windows host is prior to 140.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-88 advisory. - Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox 145 and Firefox ESR 140.5...

Mozilla Firefox ESR < 140.5

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-88 advisory. - Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox 145 and Firefox...

HPESBHF04962 rev.1 - Certain HPE ProLiant DL/XL servers Using Certain AMD EPYC Processors. AMD-SB-3029: Stale Translation Lookaside Buffer (TLB) Entry Vulnerability, Local Unauthorized Access Vulnerability

Potential Security Impact: Local: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL325 Gen12 - Prior to 1.1005-27-2025 HPE ProLiant Compute DL345 Gen12 - Prior to 1.1005-27-2025 HPE ProLiant DL145 Gen11 - Prior to 1.7008-07-2025 HPE ProLia...

Malicious code in supporting_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69ea33b789c263ed8dd20d052608564fece2564e36ab58cb7d73ee8d2479f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...