2025

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: avoid hci_dev_test_and_set_flag() in mgm

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerabi

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerab

The mcp-database-server (MCP Server) 1.1.0 and earlier, as distributed via the npm package @executeautomation/database-s

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by upload

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local use

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E1 Informatics Web

In Frappe ERPNext v15.57.5, the function get_stock_balance() at erpnext/stock/utils.py is vulnerable to SQL Injection, w

SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph par

In the Linux kernel, the following vulnerability has been resolved: efi: stmm: Fix incorrect buffer allocation method

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xatt

Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issu

A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the sys

A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the syst

Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configu

In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcp_recv

In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh re

In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The '

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rena

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that

In the Linux kernel, the following vulnerability has been resolved: perf: Avoid undefined behavior from stopping/starti

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-thc: Fix incorrect pointe

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_comp

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix memory corruption when FW resources ch

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd IC

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in m

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these b

Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed

Spoofing issue in the Site Permissions component. This vulnerability was fixed in Firefox 143 and Thunderbird 143.

Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fi

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, F

Edimax BR-6473AX v1.0.28 was discovered to contain a remote code execution (RCE) vulnerability via the Object parameter

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Megatek Communicat

The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarc

The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarch

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vegagrup Software Vega Maste

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix kernel crash due to null io->bio We shou

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroyi

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in get_max_inline_xattr_v

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free KFENCE violation dur

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt8183: Add back SSPM related clocks

In the Linux kernel, the following vulnerability has been resolved: net: ena: fix shift-out-of-bounds in exponential ba

In the Linux kernel, the following vulnerability has been resolved: ubi: ensure that VID header offset + VID header siz

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/disp: fix use-after-free in error handl

The issue was addressed with improved input validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2