CVE-2025-9615

creationtimestamp| type| source ---|---|--- 2025-12-18 10:39:32+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3maaydrooyo27 2026-01-13 10:28:31+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mccdttfulk2n 2026-01-13 11:54:03+00:00| seen|...

RHSA-2025:23422 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash...

CVE-2025-64233

creationtimestamp| type| source ---|---|--- 2025-12-18 09:29:17+00:00| seen| https://gist.github.com/Darkcrai86/24e6c46adac0761fe299e50595d43396 2025-12-18 17:02:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabnqe25jw2c...

CVE-2025-64378

creationtimestamp| type| source ---|---|--- 2025-12-18 09:23:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maau4astoe2y...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause multiple issues in the JIT compiler and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause JIT issues due to improper checks and result in an unexpected process crash...

CVE-2025-27063 Use After Free in Video

Memory corruption during video playback when video session open fails with time out error...

CVE-2025-14856

creationtimestamp| type| source ---|---|--- 2025-12-18 05:21:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maagldpmzw22...

CVE-2025-14302

Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security feature...

python: Quadratic complexity in os.path.expandvars() with user-controlled template

A vulnerability in Python’s os.path.expandvars function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denia...

cpython: Python HTMLParser quadratic complexity

A denial-of-service DoS vulnerability has been discovered in Python's html.parser.HTMLParser class. When processing specially malformed HTML input, the parsing runtime can become quadratic with respect to the input size. This significantly increased processing time can lead to excessive resource...

[SECURITY] Fedora 42 Update: golang-github-facebook-time-0^20251216git61f7510-2.fc42

Meta's Time libraries...

[SECURITY] Fedora 43 Update: golang-github-facebook-time-0^20251216git61f7510-2.fc43

Meta's Time libraries...

CVE-2025-65185

There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses...

CVE-2025-65564

The CVE-2025-65564 issue affects omec-upf (upf-epc-pfcpiface) 2.1.3-dev. The PFCP Association Setup Request, if missing the mandatory Recovery Time Stamp Information Element, triggers a nil-pointer dereference in the association setup handler and causes a panic, terminating the UPF process and po...

CVE-2025-65564

A denial-of-service vulnerability exists in the omec-upf upf-epc-pfcpiface in version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Association Setup Request that is missing the mandatory Recovery Time Stamp Information Element, the association setup handler dereferences a nil pointer...