CVE-2025-8597 Privilege Escalation via get-task-allow entitlement in MacVim.app

MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context despite...

CVE-2025-8597 Privilege Escalation via get-task-allow entitlement in MacVim.app

MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context despite...

CVE-2025-8597

CVE-2025-8597 affects MacVim on macOS due to the presence of the entitlement com.apple.security.get-task-allow . This allows local unprivileged attackers (e.g., via a malicious application) to attach a debugger, read/modify the process memory, and inject code into the app’s context, even when sig...

AccuKnox Awarded Patent for Runtime Security of Kernel Events

Menlo Park, United States, 26th August 2025, CyberNewsWire...

PT-2025-34758 · Unknown +1 · Invoice Ninja +1

Name of the Vulnerable Software and Affected Versions: Invoice Ninja versions prior to 5.0.175 Description: Invoice Ninja on macOS is susceptible to a local privilege escalation issue. The presence of the “com.apple.security.get-task-allow” entitlement allows local attackers with unprivileged...

CVE-2025-38631

In the Linux kernel, the following vulnerability has been resolved: clk: imx95-blk-ctl: Fix synchronous abort When enabling runtime PM for clock suppliers that also belong to a power domain, the following crash is thrown: error: synchronous external abort: 0000000096000010 1 PREEMPT SMP Workqueue...

CVE-2020-14796 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-17-openj9...

GHSA-XPXV-6CCF-795W vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-17-openj9...

GHSA-8GQP-9RVV-R4X9 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-17-openj9...

GHSA-5MRP-958F-Q2C7 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-17-openj9...

GHSA-3444-QG27-76CF vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-17-openj9...

GHSA-7MQH-PJFJ-W58H vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-17-openj9...

CVE-2021-35564 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-17-openj9...

CVE-2024-54534 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-17-openj9...

SUSE CVE-2025-38631

In the Linux kernel, the following vulnerability has been resolved: clk: imx95-blk-ctl: Fix synchronous abort When enabling runtime PM for clock suppliers that also belong to a power domain, the following crash is thrown: error: synchronous external abort: 0000000096000010 1 PREEMPT SMP Workqueue...

SUSE CVE-2025-38668

In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling data Failing to reset couplingdesc.ncoupled after freeing coupledrdevs can lead to NULL pointer dereference when regulators are accessed post-unbind. This can...

AZL-73809 CVE-2025-38668 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling data Failing to reset couplingdesc.ncoupled after freeing coupledrdevs can lead to NULL pointer dereference when regulators are accessed post-unbind. This can...

AZL-66572 CVE-2025-38668 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling data Failing to reset couplingdesc.ncoupled after freeing coupledrdevs can lead to NULL pointer dereference when regulators are accessed post-unbind. This can...

DEBIAN-CVE-2025-38631

In the Linux kernel, the following vulnerability has been resolved: clk: imx95-blk-ctl: Fix synchronous abort When enabling runtime PM for clock suppliers that also belong to a power domain, the following crash is thrown: error: synchronous external abort: 0000000096000010 1 PREEMPT SMP Workqueue...

CVE-2025-38631

In the Linux kernel, the following vulnerability has been resolved: clk: imx95-blk-ctl: Fix synchronous abort When enabling runtime PM for clock suppliers that also belong to a power domain, the following crash is thrown: error: synchronous external abort: 0000000096000010 1 PREEMPT SMP Workqueue...