Unity Linux 20.1070a Security Update: microcode_ctl (UTSA-2025-984698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984698 advisory. Improper Finite State Machines FSMs in Hardware Logic for some IntelR Processors may allow privileged user to potentially enable denial of service via local access...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...

webkitgtk: Processing maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...

Unspecified Vulnerability in Apple iOS/iPadOS (CNVD-2025-17891)

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and Apple iPadOS contain a security vulnerability that originates from improper state management and...

webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution

A flaw was found in webkitgtk. The vulnerability occurs due to improper state handling, which can lead to a race condition. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a type confusion issue due to improper state handling and result in an unexpected crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper state clearing, which could lead to register resets...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of state, which could lead to a race condition...

curl: Credential leak on redirect due to improper state clearing when parsing macdef in netrc.c

Summary : -When parsing a netrc. file, the macdef keyword fails to clear previously loaded credentials. If a redirect follows, these credentials are leaked to the new host. This is a new variant of CVE-2024-11053, triggered by a different code path 'macdef' instead of 'default'. No, this...

Astra Linux – Vulnerability in Intel Microcode

Improper Finite State Machines FSMs in hardware logic for certain Intel processors may allow privileged users to potentially exploit the system to cause denial of service through local access...

webkitgtk: A malicious website may exfiltrate data cross-origin

A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to a cookie management issue related to improper state management...

webkitgtk: A malicious website may exfiltrate data cross-origin

A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to a cookie management issue related to improper state management...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple iPadOS is an operating system for iPad tablet computers. A security vulnerability exists in a number of Apple products that stems from improper state management and could...

webkitgtk: A malicious website may exfiltrate data cross-origin

A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to a cookie management issue related to improper state management...