264 matches found
thunderbird: firefox: Cross-process information leaked due to malicious IPC messages
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
thunderbird: firefox: Cross-process information leaked due to malicious IPC messages
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...
PT-2025-40612
Name of the Vulnerable Software and Affected Versions MacForge version 1.2.0 Beta 1 Description The software contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root. Recommendations At the moment, there is no information about a newer version th...
EUVD-2024-52286
Malicious code in bioql PyPI...
EUVD-2024-52280
Malicious code in bioql PyPI...
EUVD-2024-52293
Malicious code in bioql PyPI...
EUVD-2024-53144
Malicious code in bioql PyPI...
EUVD-2024-53152
Malicious code in bioql PyPI...
EUVD-2024-52295
Malicious code in bioql PyPI...
EUVD-2024-53153
Malicious code in bioql PyPI...
EUVD-2024-52288
Malicious code in bioql PyPI...
Exploiting Page Faults for Covert Communication
We present a novel mechanism to construct a covert channel based on page faults. A page fault is an event that occurs when a process or a thread tries to access a page of memory that is not currently mapped to its address space. The kernel typically responds to this event by performing a context...
SUSE CVE-2025-38085
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in...
PT-2025-27291
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists between huge pmd unshare and GUP-fast in the Linux kernel. The huge pmd unshare function drops a reference on a page table that may have been shared across...
CVE-2024-54112
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-54104
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-54117
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...