146692 matches found
Exploit for External Control of File Name or Path in Microsoft
CVE-2025-240...
container escape due to /dev/console mount and related races
...
missing SFTP host verification with wolfSSH
...
netlink: Bounds-check struct nlmsgerr creation
...
Security Updates for Microsoft Office Products (October 2025) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2025 advisory, including: - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2025-59236 - Use after free i...
Exploit for Improper Input Validation in Microsoft
CVE-2024-214...
KLA89993 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in V8 can be exploited to cause denial of service. 2. Out of bounds memory read...
Securing critical infrastructure: Why Europe’s risk-based regulations matter
The Deputy CISO blog series is where Microsoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...
Securing critical infrastructure: Why Europe’s risk-based regulations matter
The Deputy CISO blog series is where Microsoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...
Microsoft Teams Flaws Allowed Attackers to Fake Identities, Rewrite Chats
Microsoft Teams vulnerabilities let attackers impersonate users, edit chat history, and spoof calls before Microsoft issued security fixes in late 2025...
[SECURITY] Fedora 43 Update: rust-reqsign-0.18.0-1.fc43
Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...
Learn what generative AI can do for your security operations center
The busier security teams get, the harder it can be to understand the full impact of false positives, queue clutter, tool fragmentation, and more. But what is clear—it all adds up to increased fatigue and an increased potential to miss the cyberthreats that matter most. To help security teams...
Microsoft Teams Bugs Let Attackers Impersonate Colleagues and Edit Messages Unnoticed
Cybersecurity researchers have disclosed details of four security flaws in Microsoft Teams that could have exposed users to serious impersonation and social engineering attacks. The vulnerabilities "allowed attackers to manipulate conversations, impersonate colleagues, and exploit notifications,"...
can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
...
[SECURITY] Fedora 42 Update: rust-reqsign-0.18.0-1.fc42
Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...
[SECURITY] Fedora 41 Update: rust-reqsign-0.18.0-1.fc41
Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services...
tracing: Fix bad hist from corrupting named_triggers list
...
CVE-2025-60711
Protection mechanism failure in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...