2025-11 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5068781)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2025-11 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5068791)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-11 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5068781)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2025-11 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5068781)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Prompt Injection in AI Browsers

This is why AIs are not ready to be personal assistants: A new attack called 'CometJacking' exploits URL parameters to pass to Perplexity's Comet AI browser hidden instructions that allow access to sensitive data from connected services, like email and calendar. In a realistic scenario, no...

kernel: KVM: arm64: Tear down vGIC on failed vCPU creation

A use-after-free flaw was found in KVM for arm64 in the Linux Kernel, if the kvmarchvcpucreate fails to share the vCPU page with the hypervisor. This vulnerability could even lead to a kernel information leak problem...

Malicious code in puma_pink-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4db39401ab1964b13e7e2a8a03c7af49370696001302a529fff1bc6f7827cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-rendang60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce6225a6e8b2ae7c7e19a792368ae3b61982385b4019b18baf703e753223e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78580 Malicious code in hadi-jengkol69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b3b9c6f92328443063d4655d84d6258eccd2340dc1a246cde2838ac6760ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-nasi60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60c8502f63333663d75337fdf537bfb7726cbd4fb6ae189bfbf3218ce6c913d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-serabi60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44bafce7c2b2c55e9c4ed941745625f5b8028f766ed3af00c04bb8e967fbbc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-sambel60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d930d83d04a17fe4508b8b3beecfbedc82ec7988eb4ab767bf97e9682ae861d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-58149

A flaw was found in Xen. When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access to any 64bit memory BAR when such device is no longer assigned to the domain. A buggy or...

OESA-2025-2636 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989989)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989989 advisory. In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattrids count A Sysbot 1 corrupted filesystem...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989709 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989465)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989465 advisory. In the Linux kernel, the following vulnerability has been resolved: satafsl: fix UAF in satafslportstop when rmmod satafsl When the rmmod satafsl.ko command is...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989579 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989857)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989857 advisory. In the Linux kernel, the following vulnerability has been resolved: dm mirror log: round up region bitmap size to BITSPERLONG The code in dm-log rounds up bitsetsize...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990214)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990214 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflow state-xtalhz can be up to 16M, so it can...