Hotfix update for Exchange Server Subscription Edition RTM HU2: September 8, 2025 (KB5066373)

None None...

Hotfix update for Exchange Server 2019 CU14 HU7: September 8, 2025 (KB5066371)

None None...

Hotfix update for Exchange Server 2019 CU15 HU4: September 8, 2025 (KB5066372)

None None...

MAL-2025-191680 Malicious code in amzn-sagemaker-studio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a557d275cca7627fa4d3e2c72f0fc9b78fc5ac70aa87a0ab586f1abf9f8777a6 Package exfiltrates the environment variables during the import --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

Malicious code in amzn-sagemaker-studio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a557d275cca7627fa4d3e2c72f0fc9b78fc5ac70aa87a0ab586f1abf9f8777a6 Package exfiltrates the environment variables during the import --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

gve: prevent ethtool ops after shutdown

...

CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...

CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...

CVE-2025-0034

CVE-2025-0034 concerns the TEE SOC Driver. The root cause is insufficient parameter sanitization, enabling an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART that can read or write past the end of allocated arrays, potentially compromising platform integrity or causing a denial of...

CVE-2023-31326

Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment TEE driver, potentially leading to loss of confidentiality...

CVE-2023-31326

CVE-2023-31326 concerns AMD components where the root cause is uninitialized variable usage in the ASP, which could allow an attacker to access leftover data from a trusted execution environment (TEE) driver and potentially cause confidentiality loss. The issue spans AMD Client and Embedded Proce...

CVE-2021-46750

Failure to validate the address and size in TEE Trusted Execution Environment may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR Trusted Memory Region that was previously allocated by the ASP bootloader leading to a potential los...

CVE-2021-46750

CVE-2021-46750 describes a failure to validate address and size in a Trusted Execution Environment (TEE) that could allow a local x86 attacker to send malformed messages to the graphics mailbox, causing overlap of a previously allocated Trusted Memory Region (TMR) by the ASP bootloader and potent...

CVE-2021-46750

Failure to validate the address and size in TEE Trusted Execution Environment may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR Trusted Memory Region that was previously allocated by the ASP bootloader leading to a potential los...

Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys

A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency wallet credentials from Ethereum developers. "The packages masquerade as legitimate cryptographic utilities and Flashbots MEV infrastructure while secretly exfiltrating...

PT-2025-36396

Name of the Vulnerable Software and Affected Versions: TEE SOC Driver affected versions not specified Description: Insufficient parameter sanitization in the TEE SOC Driver could allow an attacker to issue a malformed DRV SOC CMD ID SRIOV SPATIAL PART command, potentially leading to read or write...

PT-2025-36375

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: A failure to validate the address and size within the Trusted Execution Environment TEE could allow a malicious x86 attacker to send malformed messages to the...

PT-2025-36380

Name of the Vulnerable Software and Affected Versions: ASP affected versions not specified Description: The use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment TEE driver, potentially leading to loss of confidentiality...

CVE-2021-26383

Insufficient bounds checking in AMD TEE Trusted Execution Environment could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading to out of bounds memory access, potentially resulting in loss of integrity or availability...

CVE-2025-58373 Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vulnerability where .rooignore protections could be bypassed using symlinks. This allows an attacker with write access to the workspace to trick the extension into reading files th...