October 17, 2022 Non-security update (KB5020446) Out-of-band

None None...

VMware Cloud Foundation Resource Leak DoS

The vulnerability of the VMware Cloud Foundation virtualization platform and the VMware ESXi hypervisor is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

October 11, 2022—KB5018425 (OS Build 10240.19507) - EXPIRED

None None...

Use safeTransferFrom instead of transferFrom()

Lines of code Vulnerability details Impact Although ERC20 standard suggests that a transfer should return true on success, there are tokens that doesn't comply with this. Therefore, the transferFrom call might cause silent failures and will affect the token accounting in this contract. Proof of...

Unbound DNS DoS

The vulnerability of the Unbound DNS server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Linux kernel DoS

The vulnerability of the Linux operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Mozilla Firefox Thunderbird HTTP Request Processing JavaScript Execution

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures, bypass security restrictions, access confidential information, or execute...

Huawei CV81-WDM FW DoS

The vulnerability of the microprogramming software in Huawei CV81-WDM FW multifunctional devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created malware package...

ImageIO Component Unauthenticated Access DoS

The vulnerability of the ImageIO component in iOS, iPadOS, tvOS, watchOS operating systems, iCloud for Windows service, and the multimedia player iTunes for Windows lies in its ability to read data from beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to gain...

LibXfont Symbolic Link DoS

The vulnerability of the LibXfont library is related to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability allows an attacker to cause service failures...

LibRaw dcraw_common.cpp Heap Buffer Overflow DoS

The vulnerability of the dcrawcommon.cpp component in the LibRaw image processing library is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, an...

PT-2025-37511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's Xen/gntdev component that can lead to grant references being leaked. This occurs when a grant mapping operation fails partially, resulting in...

Microsoft Exchange Server Has a Zero-Day Problem

Plus: CIA failures allegedly got US informants killed, a former NSA worker is charged under the Espionage Act, and more...

Audio Component Qualcomm DoS Execution Code

The vulnerability of the Audio microprogramming component in Qualcomm’s embedded chips is related to a numerical overflow during playback of recordings. Exploiting this vulnerability can allow attackers to cause system failures or execute arbitrary codes...

Qualcomm Embedded Kernel Code Execution

The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips is related to improper processing of parallel operations by the supervisor for enabling or disabling IRQ signals. Exploiting this vulnerability can allow an attacker to cause service failures or execute...

DNS Library Parse Component Confidential Data Compromise

The vulnerability of the parse.c component in the DNS LDNS library is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Ethernet encapsulation protocol MITM

The vulnerability of the Ethernet encapsulation protocol lies in the ability to combine headers. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or execute a “Man-in-the-Middle” attack...

LibRaw internal/dcraw_common.cpp Heap Buffer Overflow DoS

The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Libgit2 Path Traversal DoS

The vulnerability of the path.c component in the Git method implementation in the C language using Libgit2 involves the use of a name with an incorrect reference. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, and caus...

Linux kernel binder.c Buffer Overflow DoS

The vulnerability of the binder.c component in Linux operating systems is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...