[SECURITY] Fedora 42 Update: dtkwidget-5.7.7-4.fc42

DtkWidget is Deepin graphical user interface for deepin desktop development...

[SECURITY] Fedora 42 Update: deepin-qt5integration-5.7.5-7.fc42

Multiple Qt plugins to provide better Qt5 integration for DDE is included...

PT-2025-45343

Name of the Vulnerable Software and Affected Versions AWS Research and Engineering Studio versions prior to 2025.09 Description An ownership verification issue exists in the Virtual Desktop preview page within the Research and Engineering Studio RES on AWS. This issue may allow a user with networ...

AnyDesk 安全漏洞

AnyDesk is a remote desktop connection software from AnyDesk, a German company. A security vulnerability exists in AnyDesk 9.0.4 and earlier versions, which originates from data that can be manipulated when a connection is established over an IP address, potentially resulting in AnyDesk ID spoofi...

CVE-2025-56230

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...

PT-2026-22403

Name of the Vulnerable Software and Affected Versions Docker Model Runner versions prior to 1.0.16 Docker Desktop versions prior to 4.61.0 when Model Runner is enabled Description Docker Model Runner is software used to manage, run, and deploy AI models using Docker. Versions prior to 1.0.16 expo...

CVE-2025-56230

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...

CVE-2025-56230

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...

CVE-2025-56230

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...

CVE-2025-56230

Product affected: Tencent Docs Desktop (versions 3.9.20 and earlier). Vulnerability: Missing SSL certificate validation in the update component. Impact: security risk during update (described as lack of SSL certificate validation). Remediation: update to a version later than 3.9.20 (per PT securi...

CVE-2025-56230

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...

PT-2025-45051

Name of the Vulnerable Software and Affected Versions Tencent Docs Desktop versions 3.9.20 and earlier Description The update component in Tencent Docs Desktop does not properly validate SSL certificates. This could allow for potential security risks during the update process. Recommendations...

Tencent Docs Desktop 安全漏洞

Tencent Docs Desktop is a multiplayer online collaborative document tool from Tencent China. A security vulnerability exists in Tencent Docs Desktop 3.9.20 and prior versions, which stems from a lack of SSL certificate validation in the update component...

Astra Linux – Vulnerability in Chromium

The use of after-free in Serviceworker in Google Chrome on desktops before version 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Critical...

CVE-2025-60749

Trimble SketchUp Desktop 2025 is affected by a DLL hijacking flaw in sketchup_webhelper.exe via a crafted libcef.dll. Root cause: hijacked DLL loading in SketchUp, allowing code execution within the app context (per PT-2025-44631). Affected component/file: libcef.dll used by sketchup_webhelper.ex...

Brave Browser Desktop 安全漏洞

Brave Browser Desktop is a desktop browser from Brave USA. A security vulnerability exists in Brave Browser Desktop versions prior to 1.83.10, which stems from a failure to follow the SameSite cookie attribute for the Open Link in Split View context menu item when the Split View feature is enable...

CVE-2025-60749

DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchupwebhelper.exe...

CVE-2025-60749

DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchupwebhelper.exe...

Trimble SketchUp Desktop 安全漏洞

Trimble SketchUp Desktop is a 3D modeling software from Trimble USA. A security vulnerability exists in Trimble SketchUp Desktop 2025, which stems from sketchupwebhelper.exe's use of a specially crafted libcef.dll, which could lead to a DLL hijacking attack...

CVE-2025-48980

Brave Browser Desktop (pre-1.83.10) with Split View enabled has a cookie handling flaw in the Open Link in Split View context menu: SameSite=Strict cookies could be sent during cross-site navigation. This is tied to Brave’s Split View behavior and affects confidentiality with cross-site requests....