2025-03 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5053606)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

CVE-2025-25008

CVE-2025-25008 describes an elevation-of-privilege in Windows due to improper link resolution before file access (link following). An authorized, local attacker could exploit this to gain higher privileges. CVSSv3.1 base score is 7.1 (High); attack vector LOCAL; privileges required LOW; user inte...

Windows Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft Windows allows an authorized attacker to elevate privileges locally...

PT-2025-10843 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally...

PT-2025-12453 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally...

SUSE-SU-2025:0817-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function bsc1237284. - CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator bsc1237287...

PT-2025-10715 · Libzvbi +5 · Libzvbi +5

Name of the Vulnerable Software and Affected Versions: libzvbi versions 0.2.43 and earlier Description: A critical issue has been found in libzvbi, affecting the vbi capture sim load caption function in the src/io-sim.c file. This issue leads to an integer overflow and can be initiated remotely...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56670)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56670 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: userial: Fix the issue that...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-43098)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43098 advisory. - In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev-desc-info instead of...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53226)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53226 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix NULL pointer derefernce in...

Advisory ROSA-SA-2025-2772

Software: python-urllib3 1.25.10 OS: ROSA Virtualization 3.0 packageevrstring: python-urllib3-1.25.10-5.rv30 CVE-ID: CVE-2021-33503 BDU-ID: 2022-00586 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the HTTP client for Python urllib3 is related to uncontrolled resource consumption. Exploitation of t...

Advisory ROSA-SA-2025-2759

Software: squid 3.5.20 OS: rosa-server79 packageevrstring: squid-3.5.20-17.0.5.res7.13 CVE-ID: CVE-2023-46846 BDU-ID: 2023-08063 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Squid proxy server chunked decoder is related to the server interpreting fragmented encoding syntax. Exploitation of...

Advisory ROSA-SA-2025-2760

Software: doxygen 1.8.5 OS: rosa-server79 packageevrstring: doxygen-1.8.5-4.0.1.res7 CVE-ID: CVE-2020-11022 BDU-ID: 2020-05190 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the jQuery library is associated with a failure to take measures to protect the structure of a web page. Exploitation of th...

CVE-2024-56787 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56787 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-53150 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-53150 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56724 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56724 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56574 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56574 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

Unsafe Dependency Resolution

Overview python-json-logger is a JSON Log Formatter for the Python Logging Package Affected versions of this package are vulnerable to Unsafe Dependency Resolution through the deletion of a critical dependency which could be maliciously claimed by a third party. An attacker can execute arbitrary...

CVE-2025-21840

In the Linux kernel, the following vulnerability has been resolved: thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header The intel-lpmd tool 1, which uses the THERMALGENLATTRCPUCAPABILITY attribute to receive HFI events from kernel space, encounters a segmentation fault...

CVE-2025-21836 io_uring/kbuf: reallocate buf lists on upgrade

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: reallocate buf lists on upgrade IORINGREGISTERPBUFRING can reuse an old struct iobufferlist if it was created for legacy selected buffer and has been emptied. It violates the requirement that most of the field shoul...