CVE-2025-14860

Use-after-free in the Disability Access APIs component. This vulnerability affects Firefox 146.0.1...

UBUNTU-CVE-2025-14860

Use-after-free in the Disability Access APIs component. This vulnerability affects Firefox 146.0.1...

CVE-2025-14860

Use-after-free in the Disability Access APIs component. This vulnerability affects Firefox 146.0.1...

CVE-2025-14860 Use-after-free in the Disability Access APIs component

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 146.0.1...

CVE-2025-14860

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 146.0.1...

CVE-2025-47319

Information disclosure while exposing internal TA-to-TA communication APIs to HLOS...

PT-2025-52226

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 146.0.1 Description A use-after-free issue exists in the Disability Access APIs component. This can potentially allow for unexpected behavior or crashes. Recommendations Update Firefox to version 146.0.1 or later...

Firefox -- Use-after-free

https://bugzilla.mozilla.org/showbug.cgi?id=2000597 reports: Use-after-free in the Disability Access APIs component...

CVE-2025-43526

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted...

CVE-2025-43526

This issue was addressed with improved URL validation. This issue is fixed in macOS Tahoe 26.2, Safari 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted...

CVE-2025-43526

CVE-2025-43526 affects Apple macOS Tahoe < 26.2 and Safari

CVE-2025-43526

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted...

CVE-2025-34442 AVideo < 20.1 System Path Disclosure via Public API

AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlying filesystem structure and facilitating more effective attack chains...

CVE-2025-1161

Incorrect Use of Privileged APIs vulnerability in NomySoft Information Technology Training and Consulting Inc. Nomysem allows Privilege Escalation. This issue affects Nomysem: through May 2025...

CVE-2025-1161 Improper Authorization in Nomysoft Informatics' Nomysem

Incorrect Use of Privileged APIs vulnerability in NomySoft Information Technology Training and Consulting Inc. Nomysem allows Privilege Escalation. This issue affects Nomysem: through May 2025...

CVE-2025-1161

The CVE-2025-1161 entry concerns Nomysem, an enterprise IT service management system from NomySoft Turkey. The vulnerability is described as Incorrect Use of Privileged APIs that enables Privilege Escalation. Several sources (Red Hat, CVE lists, and security trackers) corroborate that this affect...

NomySoft Nomysem 安全漏洞

NomySoft Nomysem is an enterprise-level IT service management system from NomySoft Turkey. A security vulnerability exists in NomySoft Nomysem May 2025 and earlier versions, which stems from improper use of privileged APIs and could lead to elevation of privilege...

EUVD-2025-201824

@vitejs/plugin-rs provides React Server Components RSC support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs loadServerAction, decodeReply, decodeAction when integrated into RSC...

CVE-2025-67489 @vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server

@vitejs/plugin-rs provides React Server Components RSC support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs loadServerAction, decodeReply, decodeAction when integrated into RSC...

CVE-2025-67489 @vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server

@vitejs/plugin-rs provides React Server Components RSC support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs loadServerAction, decodeReply, decodeAction when integrated into RSC...