CVE-2025-21445

CVE-2025-21445 describes memory corruption when copying results into the transmission queue shared between a virtual machine and the host. The CVE is associated with Qualcomm chipsets, with a CVSSv3.1 base score of 7.8 (HIGH impact): attack vector Local, prerequisites Low, user interaction None, ...

Windows Virtual Delivery Agent for CVAD and Citrix DaaS Security Bulletin CVE-2025-6759

Severity - High Description of Problem A vulnerability has been identified that impacts Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS. Affected Versions: The vulnerability affects the following supported versions of Windows Virtual Delivery Agent for...

PT-2025-28511

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk VHDX, enabling an attacker to gain...

Microsoft Virtual Hard Disk 安全漏洞

Microsoft Virtual Hard Disk is a virtual hard disk file format from Microsoft USA. A security vulnerability exists in Microsoft Virtual Hard Disk VHDX. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version 1607 for...

PT-2025-28436 · Qualcomm · Snapdragon +23

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs while copying the result to the transmission queue, which is shared between the virtual machine and the host. Recommendations: At the moment, there is no information...

RUCKUS Virtual SmartZone (vSZ) and RUCKUS Network Director (RND) contain multiple vulnerabilities

Overview Multiple vulnerabilities have been identified in RUCKUS Networks management products, specifically Virtual SmartZone vSZ and Network Director RND, including authentication bypass, hardcoded secrets, arbitrary file read by authenticated users, and unauthenticated remote code execution...

PT-2025-28509

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk VHDX, enabling an attacker to gain...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...

Microsoft Manage Virtual Hard Disks 安全漏洞

Microsoft Manage Virtual Hard Disks is a disk image file format from Microsoft Corporation USA. A security vulnerability exists in Microsoft Manage Virtual Hard Disks. An attacker could exploit the vulnerability to remotely execute code. The following products and editions are affected: Windows...

Microsoft Virtual Hard Disks 安全漏洞

Microsoft Virtual Hard Disks is a disk image file format from Microsoft Corporation USA. A security vulnerability exists in Microsoft Virtual Hard Disks. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 11 Version 22H2 for...

PT-2025-28581

Name of the Vulnerable Software and Affected Versions: Virtual Hard Disk VHDX affected versions not specified Description: The issue is related to an integer overflow or wraparound in Virtual Hard Disk VHDX, which allows an unauthorized attacker to execute code locally. Recommendations: At the...

Microsoft Virtual Hard Disk 安全漏洞

Microsoft Virtual Hard Disk is a virtual hard disk file format from Microsoft USA. A security vulnerability exists in Microsoft Virtual Hard Disk. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected: Windows Server 2022 Server Core...

PT-2025-28651 · Citrix · Citrix Virtual Apps/Desktops

Name of the Vulnerable Software and Affected Versions: Citrix Windows Virtual Delivery Agent versions prior to 2503 Citrix Windows Virtual Delivery Agent 2402 LTSR versions through CU2 Citrix Windows Virtual Delivery Agent 2203 LTSR version is not affected Description: A local privilege escalatio...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when copying results in a transfer queue shared between a virtual machine and a host...

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

Everything feels secure—until one small thing slips through. Even strong systems can break if a simple check is missed or a trusted tool is misused. Most threats don't start with alarms—they sneak in through the little things we overlook. A tiny bug, a reused password, a quiet connection—that's a...

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2025-53185

Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2025-53185

Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2025-53185

Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity...