PT-2025-47218

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.175 Description A type confusion issue exists within the V8 JavaScript engine in Google Chrome. This flaw could allow a remote attacker to potentially exploit heap corruption by using a specially...

The vulnerability of the ipi_remote_fence_i() function in the arch/riscv/mm/cacheflush.c module on RISC-V architecture processors in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ipiremotefencei function in the arch/riscv/mm/cacheflush.c module on RISC-V architecture processors in Linux operating systems is related to improper resource management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SIMATIC S7-1500 Deadlock (CVE-2023-52699)

In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in SysV filesystem 1, for sbbread is called with rwspinlock held. A writelock&pointerslock = readlock&pointerslock deadlock bug and a...

EUVD-2025-137768

Malicious code in gocay-uga-agidugafyi npm...

EUVD-2025-138447

Malicious code in polymer-aia-affag npm...

EUVD-2025-135015

Malicious code in unimunaf-safiiaf-cuagu npm...

CVE-2025-60706

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally...

EUVD-2025-145534

Malicious code in gracewhite npm...

MAL-2025-155382 Malicious code in guras-asia-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be45faebf774d4bc77174806ed291f085e894027e5145addc89728ddac5c45f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madrid-ucl-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0527b191c6c44cd3b4d886b4f2eb29bd8a8251b36514401f864066fe0b0ad7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120860

Malicious code in ursa-protractor-eleventy-antares npm...

EUVD-2025-117199

Malicious code in nutty-emerald-bison npm...

EUVD-2025-100003

Malicious code in dewanto-nasiuduk48-riris npm...

EUVD-2025-99902

Malicious code in dewi-otak-otak65-riris npm...

Microsoft Patch Tuesday, November 2025 Security Update Review

Microsoft released its November Patch Tuesday Security Updates. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for November 2025 This month's release addresses 68 vulnerabilities, including five critical and 59 important-severity vulnerabilities. In this month's update...

CVE-2025-60706

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally...

CVE-2025-60706 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2025-60706

According to the NCSC advisory, CVE-2025-60706 is a vulnerability in Windows Hyper-V where an out-of-bounds read can allow an authorized local attacker to disclose information (impact: access to sensitive data). The CVE is listed under Windows Hyper-V in the advisory with a CVSS v3.1 base score o...

CVE-2025-60706 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2025-63384

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...