CVE-2025-32331

In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32332

CVE-2025-32332 describes a use-after-free memory corruption in multiple locations, enabling local escalation of privilege with no additional execution privileges or user interaction. CVSSv3.1 base score 7.8 (LOCAL, HIGH). Exploitation is described as local; no exploit details are provided in the ...

CVE-2025-36899

There is a possible escalation of privilege due to test/debugging code left in a production build. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36898

There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36898

There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()

...

Failed dependencies: libmsi1 is needed by veeam-guest-interaction-proxy

Challenge Attempting to add a Linux server as a managed server fails with the following error: Failed dependencies: libmsi1 is needed by veeam-guest-interaction-proxy Rocky Linux may also display the following error if the libmsi1 package is already installed: Failed dependencies: ntfs-3g is need...

CVE-2025-22429

In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22418

Technical details about CVE-2025-22418 are not publicly provided in the supplied connected documents. Monitor for updates from official sources.

WordPress Ocean Extra plugin cross-site scripting vulnerability

WordPress Ocean Extra plugin is a free plugin for the WordPress platform, designed for the OceanWP theme, aiming to enhance the website building experience by adding extra functionality and flexibility. A cross-site scripting vulnerability exists in the WordPress Ocean Extra plugin, which stems...

CVE-2022-38693

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38694

In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38696

In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38696

Summary (CVE-2022-38696) : Multiple connected sources identify a vulnerability in BootRom caused by a missing payload size check, which could lead to a memory buffer overflow without requiring extra privileges. The affected component is described as BootRom (often in UNISOC chipsets context). No ...

CVE-2022-38693

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38693

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38693

CVE-2022-38693 concerns a flaw in FDL1 where a missing payload size check can cause a memory buffer overflow. Sources consistently describe the issue as affecting FDL1, with exploitation not requiring additional execution privileges and a network attack vector (per CVSS: AV:N/AC:L/PR:N/UI:N/S:U/C...

CVE-2022-38691

CVE-2022-38691 concerns a vulnerability in the BootROM where there is a possible missing validation for Certificate Type 0. The documented impact is local escalation of privilege with no additional execution privileges required. The description is consistent across multiple sources (NVD/Red Hat/C...

CVE-2025-9499

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwplibrary shortcode in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

ASB-A-378088320

In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...