4787 matches found
CVE-2025-1919
Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-1919
Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-1917
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
AMD CPU Microcode Signature Verification Vulnerability
AMD ID: AMD-SB-7033 Potential Impact: Loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment Severity: Medium Summary Researchers from Google®have provided AMD with a report titled “AM...
PT-2025-9738 · Google +2 · Google Chrome +2
Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 134.0.6998.35 Description: The issue is related to an inappropriate implementation in the Browser UI, allowing a remote attacker to perform UI spoofing via a crafted HTML page. The severity of this...
PT-2025-9740 · Google +2 · Google Chrome +2
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 134.0.6998.35 Description: The issue is an out of bounds read in the Media component, allowing a remote attacker to potentially access memory out of bounds via a crafted HTML page. The severity of this issue is...
CVE-2025-1006
Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. Chromium security severity: Medium...
CVE-2025-1006
CVE-2025-1006 is a Chrome/Chromium vulnerability: a use-after-free in the Network component could allow a remote attacker to trigger heap corruption via a crafted web app. Affects Google Chrome (Chromium-based) before version 133.0.6943.126. Impact is described as high (CVSS 3.1 base score 8.8; A...
CVE-2025-1006
Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. Chromium security severity: Medium...
N-MDM - Security Advisory Ivanti Neurons for MDM (N-MDM)
Summary Ivanti has released updates for Ivanti Neurons for MDM N-MDM which addresses a medium severity vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: Description | CVSS Score Severity | CVSS Vector | CWE...
Astra Linux – Vulnerability in Chromium
In versions of Google Chrome prior to 132.0.6834.83, races in frames allowed a remote attacker who convinced a user to perform certain UI gestures to perform UI spoofing through a crafted HTML page. Chromium security severity: Medium...
Azure Linux 3.0 Security Update: python3 (CVE-2024-6923)
The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6923 advisory. - There is a MEDIUM severity vulnerability affecting CPython. The email module didn't properly quote newlines...
AMD Graphics Driver Vulnerabilities – February 2025 - Lenovo Support US
No description provided...
Intel Wireless Bluetooth and Killer Bluetooth - Lenovo Support US
No description provided...
Intel Ethernet Adapter Complete Driver Pack Software Advisory - Lenovo Support US
No description provided...
Azure Linux 3.0 Security Update: python3 / tensorflow (CVE-2024-6232)
The version of python3 / tensorflow installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6232 advisory. - There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed...
SSL session reuse vulnerability
SSL session reuse vulnerability Severity: medium CVE-2025-23419 Not vulnerable: 1.27.4+, 1.26.3+ Vulnerable: 1.11.4-1.27.3...
Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2025-829)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-829 advisory. Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot...
CVE-2025-0451
Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2025-0451
CVE-2025-0451 describes an inappropriate implementation in the Extensions API of Google Chrome prior to version 133.0.6943.53. A remote attacker could induce a user to perform specific UI gestures, enabling UI spoofing via a crafted Chrome Extension. The core issue is in the Extensions API implem...