513 matches found
CVE-2025-62229 Xorg: xmayland: use-after-free in xpresentnotify structure creation
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...
CVE-2025-62229
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...
CVE-2025-62229
CVE-2025-62229, details from connected docs: A flaw in the X.Org X server and Xwayland when processing X11 Present extension notifications can leave dangling pointers during notification creation, causing a use-after-free condition. This can lead to memory corruption or a crash, potentially enabl...
CVE-2025-62229
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...
Xorg -- multiple vulnerabilities
https://access.redhat.com/errata/RHSA-2025:19432 reports: CVE-2025-62229: A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free...
SUSE CVE-2025-62229
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...
X.Org Server present_create_notifies Use-After-Free Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...
CVE-2025-40067
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist Index allocation requires at least one bit in the $BITMAP attribute to track usage of index entries. If the bitmap is empty while index blocks are already...
PT-2025-44228
Name of the Vulnerable Software and Affected Versions X.Org X Server and Xwayland versions 2:21.1.16-1ubuntu1.2 through 2:24.1.6-1ubuntu0.2 Description A flaw exists in the X.Org X server and Xwayland when handling X11 Present extension notifications. Improper error handling during notification...
UBUNTU-CVE-2025-62229
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...
Fedora 41 : httpd (2025-f94e6fe0b4)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f94e6fe0b4 advisory. New version 2.4.64 and security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
CVE-2025-23280
creationtimestamp| type| source ---|---|--- 2025-10-14 16:37:21+00:00| seen| https://infosec.exchange/users/quarkslab/statuses/115373496104721728 2025-10-14 16:37:26+00:00| seen| https://bsky.app/profile/quarkslab.bsky.social/post/3m365zvlfh22t 2025-10-15 00:30:25+00:00| seen|...
UBUNTU-CVE-2023-53678
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend without fbdev being initialized If fbdev is not initialized for some reason - in practice on platforms without display - suspending fbdev should be skipped during system suspend, fix this up. While at...
EUVD-2025-32737
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend without fbdev being initialized If fbdev is not initialized for some reason - in practice on platforms without display - suspending fbdev should be skipped during system suspend, fix this up. While at...
CVE-2023-53630
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...
CVE-2023-53630 iommufd: Fix unpinning of pages when an access is present
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...
CVE-2023-53630 iommufd: Fix unpinning of pages when an access is present
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...
Malicious code in card-present-integration (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2787c28c7a94244ac05702adeee73ed4e9d417fbb8f17ac667c50d19180340f1 Any computer that has this package installed or running should be considered...
MAL-2025-48355 Malicious code in card-present-integration (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2787c28c7a94244ac05702adeee73ed4e9d417fbb8f17ac667c50d19180340f1 Any computer that has this package installed or running should be considered...