CVE-2022-49281 cifs: fix handlecache and multiuser

In the Linux kernel, the following vulnerability has been resolved: cifs: fix handlecache and multiuser In multiuser each individual user has their own tcon structure for the share and thus their own handle for a cached directory. When we umount such a share we much make sure to release the pinne...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper handling of handlecache and multiuser in cifs...

The vulnerability of the Internet Connection Sharing (ICS) function in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2025-22211

creationtimestamp| type| source ---|---|--- 2025-02-25 22:23:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5405 2025-02-26 01:44:50+00:00| seen| https://t.me/cvedetector/18935 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-27142

LocalSend (before v1.17.0) has a path-traversal flaw in the file upload flow that allows writing files to arbitrary locations via the vulnerable endpoints, enabling remote command execution. The issue stems from missing path sanitization in the following endpoints: POST /api/localsend/v2/prepare-...

CVE-2025-26971

creationtimestamp| type| source ---|---|--- 2025-02-25 14:24:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5281 2025-02-25 17:22:55+00:00| seen| https://t.me/cvedetector/18879 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-26995

creationtimestamp| type| source ---|---|--- 2025-02-25 14:23:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5271 2025-02-25 17:22:40+00:00| seen| https://t.me/cvedetector/18868 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

February 25, 2025—KB5052093 (OS Build 26100.3323) Preview

None None...

February 25, 2025—KB5052094 (OS Builds 22621.4974 and 22631.4974) Preview

None None...

CVE-2025-27140

creationtimestamp| type| source ---|---|--- 2025-02-24 22:22:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5231 2025-02-25 00:39:07+00:00| seen| https://t.me/cvedetector/18833 2025-03-02 11:45:37+00:00| seen| Telegram/AIlKcdXcI4iU77P42me5qozY-Iqzsv6oHtnBXCNMET09Owe...

CVE-2025-27348

creationtimestamp| type| source ---|---|--- 2025-02-24 15:28:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5154 2025-02-24 17:57:42+00:00| seen| https://t.me/cvedetector/18801 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

CVE-2025-27349

creationtimestamp| type| source ---|---|--- 2025-02-24 15:28:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5153 2025-02-24 17:57:50+00:00| seen| https://t.me/cvedetector/18807 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

CVE-2025-27353

creationtimestamp| type| source ---|---|--- 2025-02-24 15:28:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5150 2025-02-24 17:57:44+00:00| seen| https://t.me/cvedetector/18804 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

CVE-2025-27355

creationtimestamp| type| source ---|---|--- 2025-02-24 15:28:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5149 2025-02-24 17:57:45+00:00| seen| https://t.me/cvedetector/18805 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

A week in security (February 17 – February 23)

Last week on Malwarebytes Labs: Healthcare security lapses keep piling up SecTopRAT bundled in Chrome installer distributed via Google Ads Google Docs used by infostealer ACRStealer as part of attack DeepSeek found to be sharing user data with TikTok parent company ByteDance Malwarebytes introduc...

CVE-2024-46975 GPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mapping

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's virtualised GPU memory...

CVE-2025-25772

creationtimestamp| type| source ---|---|--- 2025-02-21 22:17:19+00:00| seen| https://t.me/cvedetector/18689 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

CVE-2025-25770

creationtimestamp| type| source ---|---|--- 2025-02-21 22:17:12+00:00| seen| https://t.me/cvedetector/18684 2025-02-24 17:21:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5172 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

CVE-2025-25876

creationtimestamp| type| source ---|---|--- 2025-02-21 18:19:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4951 2025-02-21 19:46:33+00:00| seen| https://t.me/cvedetector/18663 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...

CVE-2024-57176

creationtimestamp| type| source ---|---|--- 2025-02-21 18:19:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4950 2025-02-21 19:46:42+00:00| seen| https://t.me/cvedetector/18671 2025-08-25 13:32:04+00:00| seen| MISP/9ca82492-7deb-4197-a6f1-191e121eef96...