CVE-2025-12438

Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: Medium...

Important Photon OS Security Update - PHSA-2025-5.0-91-0673

Updates of 'libxml2', 'linux', 'linux-esx', 'polkit' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-0673

Updates of 'libxml2', 'linux-esx', 'linux', 'polkit' packages of Photon OS have been released...

Apple iOS and iPadOS Logic Issues Insufficient Checks Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a logical issue with an insufficiently checked vulnerability that can be exploited by an attacker to view sensitive user information...

Photon OS 4.0: Linux PHSA-2025-4.0-0899

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0899. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Ruby PHSA-2025-5.0-0672

An update of the ruby package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0672. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2025-5.0-91-0672

Updates of 'git-lfs', 'libarchive', 'unbound', 'glib', 'vim', 'ruby' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-0672

Updates of 'unbound', 'git-lfs', 'vim', 'ruby', 'libarchive', 'glib' packages of Photon OS have been released...

Photon OS 5.0: Binutils PHSA-2025-5.0-0670

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0670. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2025-5.0-91-0670

Updates of 'linux', 'linux-esx', 'binutils' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-4.0-0902

Updates of 'mc', 'glib' packages of Photon OS have been released...

CVE-2025-6075

A vulnerability in Python’s os.path.expandvars function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denia...

foreman: OS command injection via ct_location and fcct_location parameters

A flaw was found in Red Hat Satellite Foreman component. This vulnerability allows an authenticated user with editsettings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting...

Moderate Photon OS Security Update - PHSA-2025-4.0-0901

Updates of 'binutils' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-4.0-0900

Updates of 'ctags' packages of Photon OS have been released...

Evernote MCP Server 操作系统命令注入漏洞

Evernote MCP Server is a Large Model Context Protocol server for brentmid individual developers. Evernote MCP Server suffers from an operating system command injection vulnerability that stems from the openBrowser function not properly validating a user-supplied string, which could lead to...

CVE-2023-43000

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-43418

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2023-43000

CVE-2023-43000 is a use-after-free vulnerability in WebKit/Web content processing that can lead to memory corruption. Affected products include Apple's macOS/iOS/iPadOS and Safari/WebKit variants, with fixes shipped in macOS Ventura 13.5, iOS 16.6/iPadOS 16.6, Safari 16.6, and iOS 15.8.7/iPadOS 1...

CVE-2023-43000

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption...