33077 matches found
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Releasing rproc-cleantable after rprocattach fails When rproc-state = RPROCDETACHED is attached to a remote processor through rprocattach, if rprochandleresources returns an error, the clean table should be...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: fbdev: Fixed doregisterframebuffer to prevent null-ptr-deref in fbvideomodetovar. If fbaddvideomode in doregisterframebuffer fails to allocate memory for fbvideomode, it will later lead to a null-ptr dereference in...
thermal: core: call put_device() only after device_register() fails
...
The vulnerability of the user_cluster_connect() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the userclusterconnect function in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the copy_from_iter() and copy_to_iter() functions in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the copyfromiter and copytoiter functions in the Linux operating system is related to the lack of code checks for function return. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `open_by_handle_at()` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the openbyhandleat function in the Linux operating system’s kernel is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the drivers/iommu/intel/iommu.h module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/iommu/intel/iommu.h module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
EUVD-2025-37390
Protection mechanism failure in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
EUVD-2025-37394
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
CVE-2025-60711
Protection mechanism failure in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2025-60711
Protection mechanism failure in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2025-10693
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
CVE-2025-10693 Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
CVE-2025-10693
CVE-2025-10693 affects Silicon Labs’ Z‑Wave PIR Sensor Reference design in SiSDK v2025.6.0 and v2025.6.1. When SmartStart Inclusion fails, the PIR sensor may join the Z‑Wave network as a non‑secure device, exposing confidentiality and integrity (High) and impacting availability (Low) with a base ...
CVE-2025-10693 Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
Astra Linux - уязвимость в libxml2
libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when...
Astra Linux - уязвимость в linux-6.1
In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix uninitialized values during inode evict If an iget fails due to not being able to retrieve information from the server then the inode structure is only partially initialized. When the inode gets evicted, references to...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Protection mechanism failure in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
EUVD-2025-37348
The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...