Several Apple products have security vulnerabilities

Apple Safari and others are products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. A security vulnerability...

PT-2025-44863

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 Safari versions prior to 26.1 visionOS versions prior to 26.1 Description A flaw exists due to improper state management. Processing specially designed web...

PT-2025-44856

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A race condition existed due to improper state handling, potentially allowing an application to access sensitive user data. Recommendations Update to macO...

PT-2025-51000

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.4 macOS Sonoma versions prior to 14.8.4 macOS Tahoe versions prior to 26.1 Description An app may be able to access sensitive user data due to improper state management. Recommendations Update macOS Sequoia...

PT-2025-51006

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iOS versions prior to 26.1 iPadOS versions prior to 18.7.2 iPadOS versions prior to 26.1 macOS Sequoia versions prior to 15.7.2 macOS Sonoma versions prior to 14.8.2 macOS Tahoe versions prior to 26.1 tvOS versions...

PT-2025-44906

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 macOS Sequoia versions prior to 15.7.2 macOS Sonoma versions prior to 14.8.2 visionOS versions prior to 26.1 Description An authorization issue exists due to improved state management...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/mediatek: Added error handling for the old state CRTC in atomicdisable. Introduced error handling to address a issue where, after a hotplug event, the cursor continues to update. This situation can lead to a kernel panic d...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a7xx: The call to CPRESETCONTEXTSTATE This call is necessary when switching contexts, as there are various states used by user space to synchronize between BR and BV, and these states are persistent across submissions. We...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fixed invalid task state transitions during class switching. When enabling the schedext scheduler, it is possible to trigger invalid task state transitions, resulting in warnings like the following which can be easily...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue arises when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is supposed to ensure the uniqueness of the Security...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: xfrm: State: Initialize stateptrs earlier in xfrmstatefind In cases of preemption, xfrmstatelookat will find a different pcpuid and look up states for that other CPU. If a state is matched for CPU2 in the statecache while the...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: HID: Nintendo: Avoid stalls during Bluetooth suspend/resume operations. We ensure that we do not cause delays or panics in the kernel when using Bluetooth-connected controllers. This issue was reported on Android devices using...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Remove the skbsecpath if the xfrm state is not found. The hardware returns a unique identifier for the decrypted packet’s xfrm state. This state is looked up in an xarray. However, the state might have been freed by th...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Discarding stale CPU state when handling SME traps The logic for handling SME traps improperly manipulates the saved FPSIMD/SVE/SME state. A race condition can occur when the SME trap handler is preempted before and...

WordPress Plugin: Import/Export and Import CSV/XML Files to WordPress – Security Vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension that can ...

EUVD-2025-37370

Agno session state overwrites between different sessions/users...

GHSA-VW84-HPRM-CXMM Agno session state overwrites between different sessions/users

Impact Under certain conditions under high concurrency, when sessionstate is passed to an Agent or Team during run or arun calls, a race condition can occur, causing a sessionstate to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed t...

Agno session state overwrites between different sessions/users

Impact Under certain conditions under high concurrency, when sessionstate is passed to an Agent or Team during run or arun calls, a race condition can occur, causing a sessionstate to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed t...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs The driver, through the SAS transport, exposes a sysfs interface to enable/disable PHYs in a controller/expander setup. When multiple PHYs are disabled and...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existence of queues. As it stands, if the interface is down, disabling or enabling XSK pools would result i...