CVE-2025-68296 drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup

In the Linux kernel, the following vulnerability has been resolved: drm, fbcon, vgaswitcheroo: Avoid race condition in fbcon setup Protect vgaswitcherooclientfbset with console lock. Avoids OOB access in fbconremapall. Without holding the console lock the call races with switching outputs. VGA...

CVE-2025-68169

In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix deadlock in memory allocation under spinlock Fix a AA deadlock in refillskbs where memory allocation while holding skbpool-lock can trigger a recursive lock acquisition attempt. The deadlock scenario occurs when the...

CVE-2025-68169

CVE-2025-68169 affects the Linux kernel where a deadlock can occur in netpoll when memory allocation happens under a spinlock in refill_skbs(). Under memory pressure, refill_skbs() holds skb_pool->lock, then alloc_skb() may fail and trigger slab_out_of_memory(), leading to printk() which can i...

CVE-2025-46296: Improper Authorization

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4...

PT-2025-51765

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4...

PT-2025-51700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the interaction between DRM, fbcon, and vga switcheroo components. Specifically, the issue occurs during fbcon setup when switching outputs, potentially leadin...

CVE-2025-13665

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665

Technical details about CVE-2025-13665 are not publicly provided in the supplied documents. Please monitor for updates from the vendor and security advisories.

EUVD-2025-202939

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665 Quartus Prime Standard Security Advisory

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665 Quartus Prime Standard Security Advisory

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

PT-2025-50799

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665: Uncontrolled Search Path Element

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-64993

A command injection vulnerability was discovered in TeamViewer DEX former 1E DEX, specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote...

EUVD-2025-202671

A command injection vulnerability was discovered in TeamViewer DEX former 1E DEX, specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991124 advisory. In the Linux kernel, the following vulnerability has been resolved: virtioconsole: eliminate anonymous moduleinit & moduleexit Eliminate anonymous moduleinit and...

PT-2025-50600

A command injection vulnerability was discovered in TeamViewer DEX former 1E DEX, specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote...

CVE-2025-65825

The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and...