CVE-2025-31273

CVE-2025-31273 is a memory corruption vulnerability in WebKit-based WebKitGTK/WebKit2GTK when processing malicious web content. Connected advisories confirm the issue and list concrete fixes across multiple distributions: Debian/webkit2gtk packages updated to 2.48.5-1~deb12u1/2.48.5-1~deb11u1, Fe...

CVE-2025-43213

CVE-2025-43213 affects WebKitGTK/WebKitGTK4 in multiple Linux distributions (AlmaLinux, Red Hat family, Fedora, Amazon Linux) and is tied to memory handling issues that can be exploited by processing malicious web content to cause an unexpected Safari/WebKit crash (and related process crashes in ...

PT-2025-31312 · Apple · Tvos +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 and 17.7.9 tvOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 visionOS versions prior to 2.6 Description: An application may be able to acce...

ROS-20250723-01

The vulnerability of the PAM-PKCS11 authentication module of Linux operating systems is related to the fact that the value of the certpolicy defaults to "none". Exploitation of the vulnerability could allow an attacker acting remotely to bypass the authentication process. remotely to bypass the...

The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability of Windows operating systems, related to synchronization errors when using shared resources, allows attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Search service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Search service in Microsoft Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the Windows Event Tracing service allows attackers to exploit their privileges.

The vulnerability of the Windows Event Tracing service in operating systems is related to the misuse of a trusted pointer. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the AirPlay Handler component in operating systems such as macOS, iPadOS, iOS, tvOS, and visionOS allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the AirPlay Handler component in operating systems such as macOS, iPadOS, iOS, tvOS, and visionOS is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of protected information...

Microsoft Virtual Hard Disks 安全漏洞

Microsoft Virtual Hard Disks is a disk image file format from Microsoft Corporation USA. A security vulnerability exists in Microsoft Virtual Hard Disks. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 11 Version 22H2 for...

webkitgtk: Logic issue allowing access to restricted ports on arbitrary servers

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary servers...

webkitgtk: Memory corruptions leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution...

webkitgtk: Logic issue leading to universal cross site scripting attack

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting...

webkitgtk: Logic issue leading to universal cross site scripting attack

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting...

webkitgtk: A logic issue may lead to cross site scripting

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal...

webkitgtk: processing web content may lead to arbitrary code execution

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

MalVol-25: a Diverse, Labelled and Detailed Volatile Memory Dataset for Malware Detection and Response Testing and Validation

This paper addresses the critical need for high-quality malware datasets that support advanced analysis techniques, particularly machine learning and agentic AI frameworks. Existing datasets often lack diversity, comprehensive labelling, and the complexity necessary for effective machine learning...

GHSA-J5CC-6RX8-FF96 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-52993

A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user e.g., nixbld or guixbuild. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before...

The vulnerability of the tool sets for developing Windows application apps in the Windows SDK operating systems allows attackers to escalate their privileges.

The vulnerability of Windows SDK tool sets for developing applications on Windows operating systems is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...