The vulnerability of the WinGUp software, a tool for automatic updating of the Notepad++ text editor, stems from insufficient verification of the authenticity of update files. This allows attackers to execute arbitrary code.

The vulnerability of the WinGUp software for updating Notepad++ editors is related to insufficient verification of the authenticity of update files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted executable file...

ownCloud < 10.15.3 Multiple Vulnerabilities

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if description...

PT-2026-5735

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.8.9 Description The Notepad++ WinGUp updater has a flaw in how it verifies the integrity of updates. This allows an attacker who can intercept or redirect update traffic to cause the updater to download and execut...

CVE-2025-13631

Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...

Malicious code in react-icon-updater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755e55af72b70c14edf83bdaea2cbd76dff5c7ab6410f9e3f44f7b521e7248b3 The package react-icon-updater was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-201330

Malicious code in react-icon-updater npm...

MAL-2025-192311 Malicious code in react-icon-updater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755e55af72b70c14edf83bdaea2cbd76dff5c7ab6410f9e3f44f7b521e7248b3 The package react-icon-updater was found to contain malicious code. Source: ghsa-malware...

Google Chrome elevation of privilege vulnerability (CNVD-2025-30386)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome prior to version 143.0.7499.41, which stems from an improper implementation of Google Updater and could lead to an elevation of privilege attack. No details of the vulnerability are...

The vulnerability of the Google Chrome browser’s Google Updater component, which allows a hacker to escalate their privileges.

The vulnerability of the Google Chrome browser’s Google Updater component is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created file...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kpt, terraform-provider-sendgrid, timestamp-authority, mongo-tools, nats, nri-rabbitmq, pluto, grafana-alloy, grafana-mimir, apisix-ingress-controller, github-mcp-server, rclone, sftpgo-plugin-eventstore, dask-gateway, grype,...

Chromium: CVE-2025-13631 Inappropriate implementation in Google Updater

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2025-13631

Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2025-13631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a...

EUVD-2025-200308

Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...

CVE-2025-13631

Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...

CVE-2025-13631

Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...

CVE-2025-13631

Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...

CVE-2025-13631

Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...

CVE-2025-13631

Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...

CVE-2025-13631

The Google Chrome browser on Mac (prior to version 143.0.7499.41 ) is vulnerable to a privilege escalation attack due to an inappropriate implementation in the Google Updater component. The root cause is attributed to insufficient validation of input data , which could allow a remote attacker to ...