The vulnerability of the `cros_ec_uart_probe()` function in the `drivers/platform/chrome/cros_ec_uart.c` module exposes the support for Linux kernel-based Chrome OS hardware devices, allowing a malicious actor to cause service failure.

The vulnerability of the crosecuartprobe function in the drivers/platform/chrome/crosecuart.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20251202-07

A vulnerability in the Google Chrome browser's DevTools web development toolkit is related to synchronization errors when using a shared resource. synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker, acting remotely, to bypass the sandbox...

The vulnerability of the Office operating system HarmonyOS, which allows a hacker to trigger a service failure

The vulnerability of the Office operating system HarmonyOS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20251202-03

Vulnerability in DecodeConfig component of Golang programming language is related to uncontrolled consumption of resources. resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial-of-service condition. denial of service A vulnerability in the Downloa...

The vulnerability of the switch_mm_irqs_off() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the switchmmirqsoff function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerabilities in the modules fs/nfsd/nfs4proc.c, fs/nfsd/nfs4state.c, fs/nfsd/nfs4xdr.c, fs/nfsd/nfsd.h, and fs/nfsd/xdr4.h of the Linux operating system’s kernel, which allow a hacker to cause a service failure

The vulnerabilities in the modules fs/nfsd/nfs4proc.c, fs/nfsd/nfs4state.c, fs/nfsd/nfs4xdr.c, fs/nfsd/nfsd.h, and fs/nfsd/xdr4.h of the Linux operating system are related to incorrect calculations. Exploiting these vulnerabilities can allow an attacker to cause service failures...

CVE-2025-58408

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in whi...

EUVD-2025-199978

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in whi...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

The vulnerability of the FortiCloud SSO component of the FortiAnalyzer security event monitoring and analysis software allows a threat actor to circumvent existing security restrictions.

The vulnerability of the FortiCloud SSO component of the FortiAnalyzer security event monitoring and analysis software is related to synchronization errors when using a shared resource. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

The vulnerability of Google Chrome’s Autofill component, which allows a hacker to replace the user interface.

The vulnerability of Google Chrome’s Autofill component is related to information representation errors in the user interface. Exploiting this vulnerability could allow an attacker to replace the user interface with a specially created HTML page...

The vulnerability of Siemens Solid Edge’s design and modeling tools, related to errors in the authentication process, allows a perpetrator to carry out a “man-in-the-middle” attack.

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to errors in the authentication process for certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

The vulnerability of the JetBrains YouTrack project and task management software, related to synchronization errors when using a shared resource, allows attackers to circumvent existing security restrictions.

The vulnerability of the JetBrains YouTrack project and task management software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to bypass existing security restrictions remotely...

The vulnerability of the service module in D-Link DSL-7740C microprogrammed software routers allows attackers to enhance their privileges.

The vulnerability of the service module in D-Link DSL-7740C microprogrammed software routers is related to access control errors. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

ROS-20251201-01

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to insufficient protection of service data. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information Vulnerability of Core component of...

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for artificial intelligence DGX Spark allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for AI systems, such as DGX Spark, is related to errors in boundary removal of critical data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Hesperus Is Phosphorus: Mapping Threat Actor Naming Taxonomies at Scale

This paper studies the problem of Threat Actor TA naming convention inconsistency across leading Cyber Threat Intelligence CTI vendors. The current decentralized and proprietary nomenclature creates confusion and significant obstacles for researchers, including difficulties in integrating and...

The vulnerability of the memory module of the HarmonyOS operating system, which allows a hacker to gain unauthorized access to the system

The vulnerability of the memory module of the HarmonyOS operating system is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the system...

CVE-2025-66260 PostgreSQL SQL Injection (status_sql.php)

PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...