Multi-Vendor BIOS Security Vulnerabilities (October, 2025) - Lenovo Support US

No description provided...

CVE-2025-54284

Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-59288 Playwright Spoofing Vulnerability

...

2025-10 .NET 8.0.21 Security Update for x86 Client (KB5068331)

2025-10 .NET 8.0.21 Security Update for x86 Client KB5068331...

2025-10 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5066791)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2025-10 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5066791)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2025-10 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5066791)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2025-10 Dynamic Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5066791)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

CVE-2025-59258

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-24 06:24:42+00:00| seen|...

CVE-2025-55682

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-24 06:24:42+00:00| seen|...

[SECURITY] [DLA 4332-1] distro-info-data database update

Debian LTS Advisory DLA-4332-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 14, 2025 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u10 This is a routine update of the distro-info-data database for Debian LTS users. It updates...

CVE-2024-44088

creationtimestamp| type| source ---|---|--- 2025-10-14 14:17:27+00:00| seen| https://seclists.org/oss-sec/2025/q4/36...

October 14, 2025-KB5066128 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 25H2

None None...

October 14, 2025-KB5066747 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

CVE-2025-11710

A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

Signal in the noise: what hashtags reveal about hacktivism in 2025

What do hacktivist campaigns look like in 2025? To answer this question, we analyzed more than 11,000 posts produced by over 120 hacktivist groups circulating across both the surface web and the dark web, with a particular focus on groups targeting MENA countries. The primary goal of our research...

EUVD-2025-34151

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

SUSE SLES15 Security Update : kernel (Live Patch 22 for SLE 15 SP5) (SUSE-SU-2025:03554-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03554-1 advisory. This update for the Linux Kernel 5.14.21-1505005591 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc:...

PT-2025-42222

CVE-2025-42647 uv found to be a psyop side channel engine...

Phoenix Contact多款产品 安全漏洞

Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP and others are an industrial grade DC uninterruptible power supply module from Phoenix Contact, Germany. A security vulnerability exists in a number of Phoenix Contact products. The vulnerability stems from the ability of an unauthenticated attacker to...