EUVD-2012-5031

Malware in sbrugna...

EUVD-2024-51869

Malicious code in bioql PyPI...

EUVD-2023-46312

Malicious code in bioql PyPI...

Threat Modeling for Enhancing Security of IoT Audio Classification Devices under a Secure Protocols Framework

The rapid proliferation of IoT nodes equipped with microphones and capable of performing on-device audio classification exposes highly sensitive data while operating under tight resource constraints. To protect against this, we present a defence-in-depth architecture comprising a security protoco...

USN-7684-1 linux, linux-aws, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - TTY drivers; - Ext4 file system; - Bluetooth subsystem; - USB sound devices; CVE-2023-52975,...

Bluetooth vulnerability in audio devices can be exploited to spy on users

Researchers have found vulnerabilities in 29 Bluetooth devices like speakers, earbuds, headphones, and wireless microphones from reputable companies including Sony, Bose, and JBL. The vulnerabilities could be exploited to spy on users, and even steal information from the device. The researchers w...

PT-2025-27362

Name of the Vulnerable Software and Affected Versions Airoha Bluetooth audio SDK versions prior to August 4, 2025 Description The Airoha Bluetooth audio SDK contains a permission bypass that allows access to critical data of the RACE protocol through the Bluetooth LE GATT service. This can lead t...

CVE-2023-41820

An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices...

February 11, 2025—KB5052072 (Security-only update)

February 11, 2025—KB5052072 Security-only update End of support information Windows Server 2008 Premium Assurance ends on January 13, 2026.Windows Server 2008 SP2 Extended Security Updates ESU ended on January 10, 2023. Additionally, Extended Security Updates on Azure only support ended on Januar...

CVE-2023-41820

An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices...

CVE-2023-41820

CVE-2023-41820 concerns the Motorola Ready For application, where an implicit-intent vulnerability could allow a local attacker to read information about connected Bluetooth audio devices. Public descriptions across multiple sources (NVD, Red Hat, CVE listings) consistently cite this issue in the...

CVE-2023-39380

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally...

PT-2023-26908 · Unknown · Audio Module

Name of the Vulnerable Software and Affected Versions: Audio module affected versions not specified Description: The issue is related to a permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally...

Plantronics HUB 3.21 Privilege Escalation Vulnerability

Plantronics HUB versions 3.21 and below are affected by a privilege escalation vulnerability allowing any local unprivileged user to acquire elevated access rights and take full control of the system. Plantronics HUB 3.21 Privilege Escalation Vulnerability...

[SECURITY] Fedora 31 Update: blueman-2.1.4-1.fc31

Blueman is a tool to use Bluetooth devices. It is designed to provide simpl e, yet effective means for controlling BlueZ API and simplifying bluetooth tas ks such as: - Connecting to 3G/EDGE/GPRS via dial-up - Connecting to/Creating bluetooth networks - Connecting to input devices - Connecting to...

Fedora: Security Advisory for blueman (FEDORA-2020-e083225fa1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: blueman-2.1.4-1.fc32

Blueman is a tool to use Bluetooth devices. It is designed to provide simpl e, yet effective means for controlling BlueZ API and simplifying bluetooth tas ks such as: - Connecting to 3G/EDGE/GPRS via dial-up - Connecting to/Creating bluetooth networks - Connecting to input devices - Connecting to...

[SECURITY] Fedora 33 Update: blueman-2.1.4-1.fc33

Blueman is a tool to use Bluetooth devices. It is designed to provide simpl e, yet effective means for controlling BlueZ API and simplifying bluetooth tas ks such as: - Connecting to 3G/EDGE/GPRS via dial-up - Connecting to/Creating bluetooth networks - Connecting to input devices - Connecting to...

March 26, 2019—KB4490481 (OS Build 17763.402)

March 26, 2019—KB4490481 OS Build 17763.402 Improvements and fixes This update includes quality improvements. Key changes include: Addresses an issue that occurs on machines that have multiple audio devices. Applications that provide advanced options for internal or external audio output devices...

VMware Workstation 14.1.5 / VMware Player 15 - Host VMX Process COM Class Hijack Privilege Escalation

VMware: Host VMX Process COM Class Hijack EoP Platform: VMware Workstation Windows v14.1.5 on Windows 10. Also tested VMware Player 15. Class: Elevation of Privilege Summary: COM classes used by the VMX process on a Windows host can be hijacked leading to elevation of privilege. Description: The...