The vulnerability of the FortiCloud SSO component of the FortiAnalyzer security event monitoring and analysis software allows a threat actor to circumvent existing security restrictions.

The vulnerability of the FortiCloud SSO component of the FortiAnalyzer security event monitoring and analysis software is related to synchronization errors when using a shared resource. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

CVE-2025-58303: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-64313: Concurrent Execution using Shared Resource with Improper Synchronization

Denial of service DoS vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58316: Concurrent Execution using Shared Resource with Improper Synchronization

DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability...

The vulnerability in the kernel/sys.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kernel/sys.c module in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-40213

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in setmeshsync and setmeshcomplete There is a BUG: KASAN: stack-out-of-bounds in setmeshsync due to memcpy from badly declared on-stack flexible array. Another crash is in setmeshcomplete due to double...

DEBIAN-CVE-2025-40212

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix refcount leak in nfsdsetfhdentry nfsd exports a "pseudo root filesystem" which is used by NFSv4 to find the various exported filesystems using LOOKUP requests from a known root filehandle. NFSv3 uses the MOUNT protocol ...

[SECURITY] Fedora 43 Update: calibre-8.14.0-1.fc43

Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...

The vulnerability of the binder_update_page_range() function in the drivers/android/binder_alloc.c module of the Linux kernel-based communication driver for Android operating systems allows a attacker to cause a service failure.

The vulnerability of the binderupdatepagerange function in the drivers/android/binderalloc.c module of the Linux kernel’s communication driver for Android is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the memory_failure() function in the mm/memory-failure.c module of the Linux kernel’s memory management subsystem allows a hacker to induce a service failure.

The vulnerability of the memoryfailure function in the mm/memory-failure.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a stack overflow and double deletion in the setmeshsync and setmeshcomplete functions in Bluetooth MGMT, whi...

The vulnerability of the setBit() function in the include/trace/events/fscache.h module of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the setBit function in the include/trace/events/fscache.h module of the Linux kernel’s firmware is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the tpm_pm_suspend() function in the drivers/char/tpm/tpm-interface.c file of the Linux kernel’s support for TPM-based alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the tpmpmsuspend function in the drivers/char/tpm/tpm-interface.c file of the Linux kernel’s support for TPM-based alphanumeric devices is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2025-11933

CVE-2025-11933 describes an issue in wolfSSL up to version 5.8.2 where improper input validation in the TLS 1.3 CKS extension parsing can allow a remote unauthenticated attacker to cause a denial‑of‑service with a crafted ClientHello containing duplicate CKS extensions. Affected software is wolfS...

CVE-2025-41115

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...

Incorrect privilege assignment

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...

Google Chrome on iO SInternals Post-Release Reuse Vulnerability

Google Chrome on iOS is a mobile browser designed by Google for Apple cell phone users, supporting cross-device synchronization, multi-tab browsing, voice search and other features to provide a smooth web browsing experience. Google Chrome on iOS suffers from an Internals reuse-after-release...

Siemens SCALANCE and RUGGEDCOM Devices Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2024-42232)

libceph: fix race between delayedwork and cephmoncstop The way the delayed work is handled in cephmoncstop is prone to races with monfault and possibly also finishhunting. Both of these can requeue the delayed work which wouldn't be canceled by any of the following code in case that happens after...

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to bypass the sandboxing protection mechanisms.

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to bypass the sandboxing protection mechanisms...

Rsync 安全漏洞

Rsync is a fast and versatile file copying tool open-sourced by RsyncProject. It is used for remote files and local files. A security vulnerability exists in Rsync that stems from an out-of-bounds read of the heap buffer due to a negative array index, which could lead to information disclosure...