Astra Linux – Vulnerability in Firefox

Removing an XSLT parameter during processing could lead to an exploitable use-after-free vulnerability. There have been reports of attacks exploiting this flaw in the wild. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

CVE-2026-7821

creationtimestamp| type| source ---|---|--- 2026-05-07 07:54:45+00:00| seen| https://ccb.belgium.be/advisories/warning-authenticated-remote-code-execution-vulnerability-ivanti-epmm-exploited-patch 2026-05-07 08:14:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-2026-12...

BIT-JAVA-MIN-2023-41993

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...

BIT-JAVA-2023-41993

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...

PT-2026-37983

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...

PT-2025-46470

Name of the Vulnerable Software and Affected Versions Multimedia Class Scheduler Service MMCSS affected versions not specified Description A use after free condition exists in the Multimedia Class Scheduler Service MMCSS. This allows a locally authorized attacker to elevate privileges...

Linux Distros Unpatched Vulnerability : CVE-2022-26486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild...

PT-2025-1058

Name of the Vulnerable Software and Affected Versions Windows Hyper-V NT Kernel Integration VSP versions are not explicitly specified in the provided sources. Description The issue is related to an elevation of privilege in Windows Hyper-V NT Kernel Integration VSP, allowing an attacker to elevat...

CVE-2023-22515

creationtimestamp| type| source ---|---|--- 2023-10-04 18:12:23+00:00| seen| https://t.me/cibsecurity/71588 2023-10-04 18:18:27+00:00| published-proof-of-concept| https://t.me/CyberWatchinsider/127 2023-10-04 22:49:19+00:00| exploited| https://t.me/ctinow/141225 2023-10-04 22:58:56+00:00|...

CVE-2021-31602

creationtimestamp| type| source ---|---|--- 2021-11-08 07:28:33+00:00| seen| https://t.me/cibsecurity/31947 2024-10-28 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-28 2024-11-04 00:00:00+00:00| exploited| The Shadowserver...

CVE-2021-31956

creationtimestamp| type| source ---|---|--- 2021-06-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=593 2021-06-09 04:51:08+00:00| seen| https://t.me/alexmakus/4121 2021-06-10 08:24:58+00:00| seen| MISP/df23874b-e926-4e6f-b80e-c8a58279bcb0 2021-06-15 10:49:56+00:00| see...

CVE-2020-3580

creationtimestamp| type| source ---|---|--- 2021-04-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=577 2021-06-24 13:34:08+00:00| published-proof-of-concept| https://t.me/ptswarm/48 2021-06-25 18:25:12+00:00| exploited| https://t.me/cibsecurity/25709 2021-06-26...

CVE-2021-3129

creationtimestamp| type| source ---|---|--- 2021-01-12 18:52:35+00:00| seen| https://t.me/cibsecurity/21947 2021-01-23 14:27:59+00:00| published-proof-of-concept| Telegram/V0JRptGFrgnQJ2SXhKrSjD8wR0dUer2UmfcxEmcwlwjBg 2021-01-24 14:36:01+00:00| seen| https://t.me/CyberSecurityTechnologies/2562...

CVE-2018-20434

creationtimestamp| type| source ---|---|--- 2019-06-04 17:58:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/librenmsaddhostcmdinject.rb 2019-06-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46970 2019-06-28 00:00:00+00:00...

CVE-2018-11759

creationtimestamp| type| source ---|---|--- 2018-10-31 23:59:05+00:00| seen| https://t.me/ctinow/4350 2018-11-04 21:21:20+00:00| seen| https://t.me/canyoupwnme/4681 2018-11-04 21:32:22+00:00| published-proof-of-concept| https://t.me/antichat/2511 2024-10-28 00:00:00+00:00| seen| The Shadowserver...

CVE-2018-11776

creationtimestamp| type| source ---|---|--- 2018-08-22 16:34:28+00:00| seen| https://t.me/thehackernews/53 2018-08-22 18:43:51+00:00| seen| https://t.me/informationsecuritychannel/19633 2018-08-22 21:14:39+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4283 2018-08-22 23:58:11+00:00|...