CVE-2025-47285 Vyper's `concat()` builtin may elide side-effects for zero-length arguments

Vyper is the Pythonic Programming Language for the Ethereum Virtual Machine. In versions up to and including 0.4.2rc1, concat may skip evaluation of side effects when the length of an argument is zero. This is due to a fastpath in the implementation which skips evaluation of argument expressions...

CVE-2025-29833

Time-of-check time-of-use toctou race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally...

CVE-2025-0134

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

Palo Alto Networks Cortex XDR Broker VM 访问控制错误漏洞

Palo Alto Networks Cortex XDR Broker VM is a secure virtual machine from Palo Alto Networks, Inc. that integrates with Cortex XDR to bridge the network and Cortex XDR. A security vulnerability exists in the Palo Alto Networks Cortex XDR Broker VM that stems from a lack of authentication that coul...

The vulnerability of the Microsoft Virtual Machine Bus (VMBus) component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Virtual Machine Bus VMBus component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Alibaba Cloud Linux 3 : 0076: open-vm-tools (ALINUX3-SA-2023:0076)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0076 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-20867: A fully compromised ESXi host can...

PT-2025-29029 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue within the drm/xe/vm subsystem. A flaw exists in the xe vm close and put function where xe svm fini can be called prematurely during virtual machine...

Google ChromeOS Out-of-Bounds Read Vulnerability

Google ChromeOS is an operating system from the American company Google. Google ChromeOS suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a virtual machine to escape...

SUSE CVE-2025-22247

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM...

CVE-2025-29833

Time-of-check time-of-use toctou race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally...

CVE-2025-29833

Time-of-check time-of-use toctou race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally...

CVE-2025-29833 Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

...

CVE-2025-29833

Technical details for CVE-2025-29833 are not provided in the connected documents. The EUVD and MSKB entries cover other issues and updates, but none specify affected product/version, root cause, impact, or remediation for this CVE. Monitor for updates.

Microsoft Windows Virtual Machine 安全漏洞

Microsoft Windows Virtual Machine is a virtualization technology from Microsoft USA. It allows you to run many virtual environments within a Windows environment. A security vulnerability exists in Microsoft Windows Virtual Machine. An attacker exploiting this vulnerability could remotely execute...

PT-2025-20949 · Microsoft · Windows Virtual Machine Bus +1

Name of the Vulnerable Software and Affected Versions: Windows Virtual Machine Bus affected versions not specified Description: A time-of-check time-of-use toctou race condition exists, allowing an authorized attacker to execute code over a network. This issue enables remote attackers to execute...

CVE-2025-22247

A vulnerability was found in open-vm-tools. A malicious actor with non-administrative privileges on a guest virtual machine VM may tamper with the local files to trigger insecure file operations within that VM. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2025-22247 Insecure file handling vulnerability

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM...

SUSE CVE-2022-49882

In the Linux kernel, the following vulnerability has been resolved: KVM: Reject attempts to consume or refresh inactive gfntopfncache Reject kvmgpccheck and kvmgpcrefresh if the cache is inactive. Not checking the active flag during refresh is particularly egregious, as KVM can end up with a vali...

OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft Capabilities

The North Korean threat actors behind the Contagious Interview campaign have been observed using updated versions of a cross-platform malware called OtterCookie with capabilities to steal credentials from web browsers and other files. NTT Security Holdings, which detailed the new findings, said t...

UBUNTU-CVE-2025-37885

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if new route isn't postable Restore an IRTE back to host control remapped or posted MSI mode if the new GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing typ...