CVE-2025-54253

2025-08-05 17:15 UTC

Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.

References:

• https://helpx.adobe.com/security/products/aem-forms/apsb25-82.html
• https://slcyber.io/assetnote-security-research-center/struts-devmode-in-2025-critical-pre-auth-vulnerabilities-in-adobe-experience-manager-forms/

CVE-2025-49557

2025-08-12 18:15 UTC

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed.

References:

• https://helpx.adobe.com/security/products/magento/apsb25-71.html

CVE-2025-54254

2025-08-05 17:15 UTC

Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope is changed. Exploitation of this issue does not require user interaction.

References:

• https://helpx.adobe.com/security/products/aem-forms/apsb25-82.html

CVE-2025-49555

2025-08-12 18:15 UTC

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.

References:

• https://helpx.adobe.com/security/products/magento/apsb25-71.html

CVE-2025-54230

2025-08-12 23:15 UTC

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

References:

• https://helpx.adobe.com/security/products/framemaker/apsb25-83.html

CVE-2025-54229

2025-08-12 23:15 UTC

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

References:

• https://helpx.adobe.com/security/products/framemaker/apsb25-83.html

CVE-2025-54231

2025-08-12 23:15 UTC

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

References:

• https://helpx.adobe.com/security/products/framemaker/apsb25-83.html

CVE-2025-54232

2025-08-12 23:15 UTC

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

References:

• https://helpx.adobe.com/security/products/framemaker/apsb25-83.html

CVE-2025-49554

2025-08-12 18:15 UTC

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input, causing the application to crash or become unresponsive. Exploitation of this issue does not require user interaction.

References:

• https://helpx.adobe.com/security/products/magento/apsb25-71.html

CVE-2025-49556

2025-08-12 18:15 UTC

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction, and scope is unchanged.

References:

• https://helpx.adobe.com/security/products/magento/apsb25-71.html

CVE-2025-54472

2025-08-14 09:15 UTC

Unlimited memory allocation in redis protocol parser in Apache bRPC (all versions < 1.14.1) on all platforms allows attackers to crash the service via network. Root Cause: In the bRPC Redis protocol parser code, memory for arrays or strings of corresponding sizes is allocated based on the integers read from the network. If the integer read from the network is too large, it may cause a bad alloc error and lead to the program crashing. Attackers can exploit this feature by sending special data packets to the bRPC service to carry out a denial-of-service attack on it. The bRPC 1.14.0 version tried to fix this issue by limited the memory allocation size, however, the limitation checking code is not well implemented that may cause integer overflow and evade such limitation. So the 1.14.0 version is also vulnerable, although the integer range that affect version 1.14.0 is different from that affect version < 1.14.0. Affected scenarios: Using bRPC as a Redis server to provide network services to untrusted clients, or using bRPC as a Redis client to call untrusted Redis services. How to Fix: we provide two methods, you can choose one of them: 1. Upgrade bRPC to version 1.14.1. 2. Apply this patch ( https://github.com/apache/brpc/pull/3050 ) manually. No matter you choose which method, you should note that the patch limits the maximum length of memory allocated for each time in the bRPC Redis parser. The default limit is 64M. If some of you redis request or response have a size larger than 64M, you might encounter error after upgrade. For such case, you can modify the gflag redis_max_allocation_size to set a larger limit.

References:

• https://lists.apache.org/thread/r3xsy3wvs4kmfhc281173k5b6ll1xt2m

CVE-2025-48989

2025-08-13 13:15 UTC

Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.9, from 10.1.0-M1 through 10.1.43 and from 9.0.0.M1 through 9.0.107. Older, EOL versions may also be affected. Users are recommended to upgrade to one of versions 11.0.10, 10.1.44 or 9.0.108 which fix the issue.

References:

• https://lists.apache.org/thread/9ydfg0xr0tchmglcprhxgwhj0hfwxlyf

CVE-2025-43192

2025-07-30 00:15 UTC

A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. Account-driven User Enrollment may still be possible with Lockdown Mode turned on.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150

CVE-2025-43222

2025-07-30 00:15 UTC

A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An attacker may be able to cause unexpected app termination.

References:

• https://support.apple.com/en-us/124148
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43233

2025-07-30 00:15 UTC

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app acting as a HTTPS proxy could get access to sensitive user data.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43189

2025-07-30 00:15 UTC

This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150

CVE-2025-43199

2025-07-30 00:15 UTC

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app may be able to gain root privileges.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43220

2025-07-30 00:15 UTC

This issue was addressed with improved validation of symlinks. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data.

References:

• https://support.apple.com/en-us/124148
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43245

2025-07-30 00:15 UTC

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43184

2025-07-30 00:15 UTC

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.4. A shortcut may be able to bypass sensitive Shortcuts app settings.

References:

• https://support.apple.com/en-us/122373
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43253

2025-07-30 00:15 UTC

This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to launch arbitrary binaries on a trusted device.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150

CVE-2025-43198

2025-07-30 00:15 UTC

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access protected user data.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150

CVE-2025-43193

2025-07-30 00:15 UTC

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to cause a denial-of-service.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43194

2025-07-30 00:15 UTC

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to modify protected parts of the file system.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43237

2025-07-30 00:15 UTC

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6. An app may be able to cause unexpected system termination.

References:

• https://support.apple.com/en-us/124149

CVE-2025-43275

2025-07-30 00:15 UTC

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43209

2025-07-30 00:15 UTC

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6, tvOS 18.6, macOS Sonoma 14.7.7, watchOS 11.6, visionOS 2.6, macOS Ventura 13.7.7. Processing maliciously crafted web content may lead to an unexpected Safari crash.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124148
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154
• https://support.apple.com/en-us/124155

CVE-2025-43232

2025-07-30 00:15 UTC

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to bypass certain Privacy preferences.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43261

2025-07-30 00:15 UTC

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43186

2025-07-30 00:15 UTC

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, visionOS 2.6, macOS Ventura 13.7.7. Parsing a file may lead to an unexpected app termination.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154
• https://support.apple.com/en-us/124155

CVE-2025-43234

2025-07-30 00:15 UTC

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in watchOS 11.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, macOS Sequoia 15.6, visionOS 2.6. Processing a maliciously crafted texture may lead to unexpected app termination.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154
• https://support.apple.com/en-us/124155

CVE-2025-43243

2025-07-30 00:15 UTC

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to modify protected parts of the file system.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43244

2025-07-30 00:15 UTC

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-31279

2025-07-30 00:15 UTC

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to fingerprint the user.

References:

• https://support.apple.com/en-us/124148
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43273

2025-07-30 00:15 UTC

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to circumvent sandbox restrictions.

References:

• https://support.apple.com/en-us/124149

CVE-2025-31281

2025-07-30 00:15 UTC

An input validation issue was addressed with improved memory handling. This issue is fixed in visionOS 2.6, tvOS 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6. Processing a maliciously crafted file may lead to unexpected app termination.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154

CVE-2025-31229

2025-07-30 00:15 UTC

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6. Passcode may be read aloud by VoiceOver.

References:

• https://support.apple.com/en-us/124147

CVE-2025-43300

2025-08-21 01:15 UTC

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.8, macOS Ventura 13.7.8, iPadOS 17.7.10, macOS Sequoia 15.6.1, iOS 18.6.2 and iPadOS 18.6.2. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

References:

• https://support.apple.com/en-us/124925
• https://support.apple.com/en-us/124926
• https://support.apple.com/en-us/124927
• https://support.apple.com/en-us/124928
• https://support.apple.com/en-us/124929

CVE-2025-31277

2025-07-30 00:15 UTC

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124152
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154
• https://support.apple.com/en-us/124155

CVE-2025-31278

2025-07-30 00:15 UTC

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iPadOS 17.7.9, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124148
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124152
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154
• https://support.apple.com/en-us/124155

CVE-2025-43270

2025-07-30 00:15 UTC

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may gain unauthorized access to Local Network.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-31273

2025-07-30 00:15 UTC

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to memory corruption.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124152
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154
• https://support.apple.com/en-us/124155

CVE-2025-43249

2025-07-30 00:15 UTC

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-31280

2025-07-30 00:15 UTC

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted file may lead to heap corruption.

References:

• https://support.apple.com/en-us/124149

CVE-2025-43248

2025-07-30 00:15 UTC

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain root privileges.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150

CVE-2025-43196

2025-07-30 00:15 UTC

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-31243

2025-07-30 00:15 UTC

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. An app may be able to gain root privileges.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43256

2025-07-30 00:15 UTC

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to gain root privileges.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150

CVE-2025-24119

2025-07-30 00:15 UTC

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

References:

• https://support.apple.com/en-us/122068
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43277

2025-07-30 00:15 UTC

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, watchOS 11.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted audio file may lead to memory corruption.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154
• https://support.apple.com/en-us/124155

CVE-2025-43188

2025-07-30 00:15 UTC

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges.

References:

• https://support.apple.com/en-us/124149

CVE-2025-24224

2025-07-30 00:15 UTC

The issue was addressed with improved checks. This issue is fixed in tvOS 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.9, macOS Sequoia 15.5, watchOS 11.5, visionOS 2.5, macOS Ventura 13.7.7. A remote attacker may be able to cause unexpected system termination.

References:

• https://support.apple.com/en-us/122404
• https://support.apple.com/en-us/122716
• https://support.apple.com/en-us/122720
• https://support.apple.com/en-us/122721
• https://support.apple.com/en-us/122722
• https://support.apple.com/en-us/124148
• https://support.apple.com/en-us/124151

CVE-2025-43223

2025-07-30 00:15 UTC

A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.7, iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6, macOS Sonoma 14.7.7, watchOS 11.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. A non-privileged user may be able to modify restricted network settings.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124148
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154
• https://support.apple.com/en-us/124155

CVE-2025-43227

2025-07-30 00:15 UTC

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may disclose sensitive user information.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124152
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154
• https://support.apple.com/en-us/124155

CVE-2025-43221

2025-07-30 00:15 UTC

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, visionOS 2.6, tvOS 18.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154

CVE-2025-43254

2025-07-30 00:15 UTC

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. Processing a maliciously crafted file may lead to unexpected app termination.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43239

2025-07-30 00:15 UTC

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination.

References:

• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124150
• https://support.apple.com/en-us/124151

CVE-2025-43224

2025-07-30 00:15 UTC

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 2.6, tvOS 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

References:

• https://support.apple.com/en-us/124147
• https://support.apple.com/en-us/124149
• https://support.apple.com/en-us/124153
• https://support.apple.com/en-us/124154

CVE-2025-20265

2025-08-14 17:15 UTC

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device.&nbsp; This vulnerability is due to a lack of proper handling of user input during the authentication phase. An attacker could exploit this vulnerability by sending crafted input when entering credentials that will be authenticated at the configured RADIUS server. A successful exploit could allow the attacker to execute commands at a high&nbsp;privilege level. Note: For this vulnerability to be exploited, Cisco Secure FMC Software must be configured for RADIUS authentication for the web-based management interface, SSH management, or both.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-radius-rce-TNBKf79
• https://www.bleepingcomputer.com/news/security/cisco-warns-of-max-severity-flaw-in-firewall-management-center/
• https://www.theregister.com/2025/08/15/cisco_secure_firewall_management_bug/

CVE-2025-20134

2025-08-14 17:15 UTC

A vulnerability in the certificate processing of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper parsing of SSL/TLS certificates. An attacker could exploit this vulnerability by sending crafted DNS packets that match a static Network Address Translation (NAT) rule with DNS inspection enabled through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ssltls-dos-eHw76vZe

CVE-2025-20222

2025-08-14 17:15 UTC

A vulnerability in the RADIUS proxy feature for the IPsec VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper processing of IPv6 packets. An attacker could exploit this vulnerability by sending IPv6 packets over an IPsec VPN connection to&nbsp;an affected device. A successful exploit could allow the attacker to trigger a reload of the device, resulting in a DoS condition.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fp2k-IPsec-dos-tjwgdZCO

CVE-2025-20253

2025-08-14 17:15 UTC

A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a DoS condition. This vulnerability is due to the improper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to cause an infinite loop that exhausts resources and could cause the device to reload.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-DOESHWHy

CVE-2025-20133

2025-08-14 17:15 UTC

A vulnerability in the management and VPN web servers of the Remote Access SSL VPN feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly stop responding, resulting in a DoS condition. This vulnerability is due to ineffective validation of user-supplied input during the Remote Access SSL VPN authentication process. An attacker could exploit this vulnerability by sending a crafted request to the VPN service on an affected device. A successful exploit could allow the attacker to cause a DoS condition where the device stops responding to Remote Access SSL VPN authentication requests.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-mfPekA6e

CVE-2025-20263

2025-08-14 17:15 UTC

A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system.&nbsp; This vulnerability is due to insufficient boundary checks for specific data that is provided to the web services interface of an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected system. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected system, which could cause the system to reload, resulting in a denial of service (DoS) condition.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-buffer-overflow-PyRUhWBC

CVE-2025-20136

2025-08-14 17:15 UTC

A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation (NAT) DNS inspection for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.&nbsp; This vulnerability is due to an infinite loop condition that occurs when a Cisco Secure ASA or Cisco Secure FTD device processes DNS packets with DNS inspection enabled and the device is configured for NAT44, NAT64, or NAT46. An attacker could exploit this vulnerability by sending crafted DNS packets that match a static NAT rule with DNS inspection enabled through an affected device. A successful exploit could allow the attacker to create an infinite loop and cause the device to reload, resulting in a DoS condition.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-nat-dns-dos-bqhynHTM

CVE-2025-20239

2025-08-14 17:15 UTC

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition. This vulnerability is due to a lack of proper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. In the case of Cisco IOS and IOS XE Software, a successful exploit could allow the attacker to cause the device to reload unexpectedly. In the case of Cisco ASA and FTD Software, a successful exploit could allow the attacker to partially exhaust system memory, causing system instability such as being unable to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-DOESHWHy

CVE-2025-20243

2025-08-14 17:15 UTC

A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to improper validation of user-supplied input on an interface with VPN web services. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on an affected device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-mfPekA6e

CVE-2025-20217

2025-08-14 17:15 UTC

A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incorrect processing of traffic that is inspected by an affected device. An attacker could exploit this vulnerability by sending crafted traffic through the affected device. A successful exploit could allow the attacker to cause the affected device to enter an infinite loop while inspecting traffic, resulting in a DoS condition. The system watchdog will restart the Snort process automatically.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-SvKhtjgt

CVE-2025-20251

2025-08-14 17:15 UTC

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to create or delete arbitrary files on the underlying operating system. If critical system files are manipulated, new Remote Access SSL VPN sessions could be denied and existing sessions could be dropped, causing a denial of service (DoS) condition. An exploited device requires a manual reboot to recover. This vulnerability is due to insufficient input validation when processing HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to create or delete files on the underlying operating system, which could cause the Remote Access SSL VPN service to become unresponsive. To exploit this vulnerability, the attacker must be authenticated as a VPN user of the affected device.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-http-file-hUyX2jL4

CVE-2025-20148

2025-08-14 17:15 UTC

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document. This vulnerability is due to improper validation of user-supplied data. An attacker could exploit this vulnerability by submitting malicious content to an affected device and using the device to generate a document that contains sensitive information. A successful exploit could allow the attacker to alter the standard layout of the device-generated documents, read arbitrary files from the underlying operating system, and conduct server-side request forgery (SSRF) attacks. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Security Analyst (Read Only).

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-html-inj-MqjrZrny

CVE-2025-20127

2025-08-14 17:15 UTC

A vulnerability in the TLS 1.3 implementation for a specific cipher for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software for Cisco Firepower 3100 and 4200 Series devices could allow an authenticated, remote attacker to consume resources that are associated with incoming TLS 1.3 connections, which eventually could cause the device to stop accepting any new SSL/TLS or VPN requests. This vulnerability is due to the implementation of the TLS 1.3 Cipher TLS_CHACHA20_POLY1305_SHA256. An attacker could exploit this vulnerability by sending a large number of TLS 1.3 connections with the specific TLS 1.3 Cipher TLS_CHACHA20_POLY1305_SHA256. A successful exploit could allow the attacker to cause a denial of service (DoS) condition where no new incoming encrypted connections are accepted. The device must be reloaded to clear this condition. Note: These incoming TLS 1.3 connections include both data traffic and user-management traffic. After the device is in the vulnerable state, no new encrypted connections can be accepted.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-3100_4200_tlsdos-2yNSCd54

CVE-2025-20244

2025-08-14 17:15 UTC

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow a remote attacker that is authenticated as a VPN user to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to incomplete error checking when parsing an HTTP header field value. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause a DoS condition, which would cause the affected device to reload.

References:

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpnwebs-dos-hjBhmBsX

CVE-2025-38747

2025-08-06 20:15 UTC

Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to Elevation of Privileges.

References:

• https://www.dell.com/support/kbdoc/en-us/000353093/dsa-2025-315

CVE-2025-9074

2025-08-20 14:15 UTC

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation (ECI) enabled, and with or without the "Expose daemon on tcp://localhost:2375 without TLS" option enabled. This can lead to execution of a wide range of privileged commands to the engine API, including controlling other containers, creating new ones, managing images etc. In some circumstances (e.g. Docker Desktop for Windows with WSL backend) it also allows mounting the host drive with the same privileges as the user running Docker Desktop.

References:

• https://docs.docker.com/desktop/release-notes/#4443
• https://blog.qwertysecurity.com/Articles/blog3.html
• https://pvotal.tech/breaking-dockers-isolation-using-docker-cve-2025-9074/

CVE-2025-52585

2025-08-13 15:15 UTC

When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References:

• https://my.f5.com/manage/s/article/K000141436

CVE-2025-46405

2025-08-13 15:15 UTC

When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References:

• https://my.f5.com/manage/s/article/K000151546

CVE-2025-54809

2025-08-13 15:15 UTC

F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References:

• https://my.f5.com/manage/s/article/K000152049

CVE-2025-24975

2025-08-15 15:15 UTC

Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnerable if ExtConnPoolSize is not set equal to 0. If connections stored in ExtConnPool are not verified for presence and suitability of the CryptCallback interface is used when created versus what is available could result in a segfault in the server process. Encrypted databases, accessed by execute statement on external, may be accessed later by an attachment missing a key to that database. In a case when execute statement are chained, segfault may happen. Additionally, the segfault may affect unencrypted databases. This issue has been patched in snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609 and point releases 4.0.6 and 5.0.2. A workaround for this issue involves setting ExtConnPoolSize equal to 0 in firebird.conf.

References:

• https://github.com/FirebirdSQL/firebird/commit/658abd20449f72097fbbce57e8e6ae42ff837fb6
• https://github.com/FirebirdSQL/firebird/issues/8429
• https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-fx9r-rj68-7p69
• https://www.vicarius.io/vsociety/posts/cve-2025-24975-detect-vulnerable-firebird
• https://www.vicarius.io/vsociety/posts/cve-2025-24975-mitigate-firebird-vulnerability

CVE-2025-25256

2025-08-12 19:15 UTC

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSIEM version 7.3.0 through 7.3.1, 7.2.0 through 7.2.5, 7.1.0 through 7.1.7, 7.0.0 through 7.0.3 and before 6.7.9 allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests.

References:

• https://fortiguard.fortinet.com/psirt/FG-IR-25-152
• https://www.theregister.com/2025/08/13/fortinet_discloses_critical_bug/
• https://github.com/watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256
• https://labs.watchtowr.com/should-security-solutions-be-secure-maybe-were-all-wrong-fortinet-fortisiem-pre-auth-command-injection-cve-2025-25256/

CVE-2024-26009

2025-08-12 19:15 UTC

An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS version 6.4.0 through 6.4.15 and before 6.2.16, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.8 and before 7.0.15 & FortiPAM before version 1.2.0 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number.

References:

• https://fortiguard.fortinet.com/psirt/FG-IR-24-042

CVE-2025-52970

2025-08-12 19:15 UTC

A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.

References:

• https://fortiguard.fortinet.com/psirt/FG-IR-25-448
• https://pwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970

CVE-2025-49813

2025-08-12 19:15 UTC

An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability [CWE-78] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a remote and authenticated attacker with low privilege to execute unauthorized code via specifically crafted HTTP parameters.

References:

• https://fortiguard.fortinet.com/psirt/FG-IR-25-501

CVE-2025-53744

2025-08-12 19:15 UTC

An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions, may allow a remote authenticated attacker with high privileges to escalate their privileges to super-admin via registering the device to a malicious FortiManager.

References:

• https://fortiguard.fortinet.com/psirt/FG-IR-25-173

CVE-2025-6186

2025-08-13 18:15 UTC

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to achieve account takeover by injecting malicious HTML into work item names.

References:

• https://gitlab.com/gitlab-org/gitlab/-/issues/549844
• https://hackerone.com/reports/3189522

CVE-2025-7734

2025-08-13 18:15 UTC

An issue has been discovered in GitLab CE/EE affecting all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content.

References:

• https://gitlab.com/gitlab-org/gitlab/-/issues/556090
• https://hackerone.com/reports/3247096

CVE-2025-7739

2025-08-13 18:15 UTC

An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve stored cross-site scripting by injecting malicious HTML content in scoped label descriptions.

References:

• https://gitlab.com/gitlab-org/gitlab/-/issues/556111
• https://hackerone.com/reports/3255849

CVE-2025-4609

2025-08-22 21:15 UTC

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 136.0.7103.113 allowed a remote attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

References:

• https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html
• https://issues.chromium.org/issues/412578726

CVE-2025-8578

2025-08-07 02:15 UTC

Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

References:

• https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html
• https://issues.chromium.org/issues/423387026

CVE-2025-8901

2025-08-13 03:15 UTC

Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

References:

• https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html
• https://issues.chromium.org/issues/435139154

CVE-2025-8576

2025-08-07 02:15 UTC

Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)

References:

• https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html
• https://issues.chromium.org/issues/414760982

CVE-2025-8292

2025-07-30 02:17 UTC

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References:

• https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_29.html
• https://issues.chromium.org/issues/426054987

CVE-2025-8879

2025-08-13 03:15 UTC

Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit heap corruption via a curated set of gestures. (Chromium security severity: High)

References:

• https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html
• https://issues.chromium.org/issues/432035817

CVE-2025-8880

2025-08-13 03:15 UTC

Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

References:

• https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html
• https://issues.chromium.org/issues/433533359

CVE-2025-8882

2025-08-13 03:15 UTC

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

References:

• https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html
• https://issues.chromium.org/issues/435623339

CVE-2025-9132

2025-08-20 01:15 UTC

Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References:

• https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_19.html
• https://issues.chromium.org/issues/436181695

CVE-2025-6000

2025-08-01 18:15 UTC

A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

References:

• https://discuss.hashicorp.com/t/hcsec-2025-14-privileged-vault-operator-may-execute-code-on-the-underlying-host/76033

CVE-2025-5999

2025-08-01 18:15 UTC

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.

References:

• https://discuss.hashicorp.com/t/hcsec-2025-13-vault-root-namespace-operator-may-elevate-token-privileges/76032

CVE-2025-33092

2025-07-29 19:15 UTC

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

References:

• https://www.ibm.com/support/pages/node/7240940

CVE-2025-33120

2025-08-22 15:15 UTC

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges.

References:

• https://www.ibm.com/support/pages/node/7242869

CVE-2025-5456

2025-08-12 15:15 UTC

A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service. CWE-125

References:

• https://forums.ivanti.com/s/article/August-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-Multiple-CVEs?language=en_US

CVE-2025-5462

2025-08-12 15:15 UTC

A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service.

References:

• https://forums.ivanti.com/s/article/August-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-Multiple-CVEs?language=en_US

CVE-2025-8296

2025-08-12 15:15 UTC

SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrary SQL queries. In certain conditions, this can also lead to remote code execution

References:

• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-CVE-2025-8296-CVE-2025-8297?language=en_US

CVE-2025-8297

2025-08-12 15:15 UTC

Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve remote code execution

References:

• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-CVE-2025-8296-CVE-2025-8297?language=en_US

CVE-2025-57731

2025-08-20 10:15 UTC

In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram content

References:

• https://www.jetbrains.com/privacy-security/issues-fixed/

CVE-2025-54531

2025-07-28 17:15 UTC

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows

References:

• https://www.jetbrains.com/privacy-security/issues-fixed/

CVE-2025-57732

2025-08-20 10:15 UTC

In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership

References:

• https://www.jetbrains.com/privacy-security/issues-fixed/

CVE-2025-54530

2025-07-28 17:15 UTC

In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions

References:

• https://www.jetbrains.com/privacy-security/issues-fixed/

CVE-2025-47954

2025-08-12 18:15 UTC

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47954

CVE-2025-49759

2025-08-12 18:15 UTC

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49759

CVE-2025-49758

2025-08-12 18:15 UTC

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49758

CVE-2025-24999

2025-08-12 18:15 UTC

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24999

CVE-2025-53727

2025-08-12 18:15 UTC

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53727

CVE-2025-49712

2025-08-12 18:15 UTC

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49712

CVE-2025-53740

2025-08-12 18:15 UTC

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53740

CVE-2025-53731

2025-08-12 18:15 UTC

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53731

CVE-2025-53786

2025-08-06 16:15 UTC

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identified specific security implications tied to the guidance and configuration steps outlined in the April announcement. Microsoft is issuing CVE-2025-53786 to document a vulnerability that is addressed by taking the steps documented with the April 18th announcement. Microsoft strongly recommends reading the information, installing the April 2025 (or later) Hot Fix and implementing the changes in your Exchange Server and hybrid environment.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53786

CVE-2025-53732

2025-08-12 18:15 UTC

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53732

CVE-2025-53151

2025-08-12 18:15 UTC

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53151

CVE-2025-53723

2025-08-12 18:15 UTC

Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53723

CVE-2025-53789

2025-08-12 18:15 UTC

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53789

CVE-2025-53154

2025-08-12 18:15 UTC

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53154

CVE-2025-53155

2025-08-12 18:15 UTC

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53155

CVE-2025-53773

2025-08-12 18:15 UTC

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53773
• https://embracethered.com/blog/posts/2025/github-copilot-remote-code-execution-via-prompt-injection/
• https://news.ycombinator.com/item?id=44883108

CVE-2025-49761

2025-08-12 18:15 UTC

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49761

CVE-2025-53141

2025-08-12 18:15 UTC

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53141

CVE-2025-50168

2025-08-12 18:15 UTC

Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50168

CVE-2025-33051

2025-08-12 18:15 UTC

Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33051

CVE-2025-53783

2025-08-12 18:15 UTC

Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53783

CVE-2025-53760

2025-08-12 18:15 UTC

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53760

CVE-2025-50167

2025-08-12 18:15 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50167

CVE-2025-9491

2025-08-26 17:15 UTC

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of .LNK files. Crafted data in an .LNK file can cause hazardous content in the file to be invisible to a user who inspects the file via the Windows-provided user interface. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25373.

References:

• https://www.zerodayinitiative.com/advisories/ZDI-25-148/

CVE-2025-53721

2025-08-12 18:15 UTC

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

References:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53721

CVE-2025-9187

2025-08-19 21:15 UTC

Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 142 and Thunderbird < 142.

References:

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1825621%2C1970079%2C1976736%2C1979072
• https://www.mozilla.org/security/advisories/mfsa2025-64/
• https://www.mozilla.org/security/advisories/mfsa2025-70/

CVE-2025-8042

2025-08-19 21:15 UTC

Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads. This vulnerability affects Firefox < 141.

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1791322
• https://www.mozilla.org/security/advisories/mfsa2025-56/

CVE-2025-9179

2025-08-19 21:15 UTC

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1979527
• https://www.mozilla.org/security/advisories/mfsa2025-64/
• https://www.mozilla.org/security/advisories/mfsa2025-65/
• https://www.mozilla.org/security/advisories/mfsa2025-66/
• https://www.mozilla.org/security/advisories/mfsa2025-67/
• https://www.mozilla.org/security/advisories/mfsa2025-70/
• https://www.mozilla.org/security/advisories/mfsa2025-71/
• https://www.mozilla.org/security/advisories/mfsa2025-72/

CVE-2025-9184

2025-08-19 21:15 UTC

Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2.

References:

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1929482%2C1976376%2C1979163%2C1979955
• https://www.mozilla.org/security/advisories/mfsa2025-64/
• https://www.mozilla.org/security/advisories/mfsa2025-67/
• https://www.mozilla.org/security/advisories/mfsa2025-70/
• https://www.mozilla.org/security/advisories/mfsa2025-72/

CVE-2025-9185

2025-08-19 21:15 UTC

Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.

References:

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1970154%2C1976782%2C1977166
• https://www.mozilla.org/security/advisories/mfsa2025-64/
• https://www.mozilla.org/security/advisories/mfsa2025-65/
• https://www.mozilla.org/security/advisories/mfsa2025-66/
• https://www.mozilla.org/security/advisories/mfsa2025-67/
• https://www.mozilla.org/security/advisories/mfsa2025-70/
• https://www.mozilla.org/security/advisories/mfsa2025-71/
• https://www.mozilla.org/security/advisories/mfsa2025-72/

CVE-2025-9180

2025-08-19 21:15 UTC

'Same-origin policy bypass in the Graphics: Canvas2D component.' This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1979782
• https://www.mozilla.org/security/advisories/mfsa2025-64/
• https://www.mozilla.org/security/advisories/mfsa2025-65/
• https://www.mozilla.org/security/advisories/mfsa2025-66/
• https://www.mozilla.org/security/advisories/mfsa2025-67/
• https://www.mozilla.org/security/advisories/mfsa2025-70/
• https://www.mozilla.org/security/advisories/mfsa2025-71/
• https://www.mozilla.org/security/advisories/mfsa2025-72/

CVE-2025-9182

2025-08-19 21:15 UTC

'Denial-of-service due to out-of-memory in the Graphics: WebRender component.' This vulnerability affects Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2.

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1975837
• https://www.mozilla.org/security/advisories/mfsa2025-64/
• https://www.mozilla.org/security/advisories/mfsa2025-67/
• https://www.mozilla.org/security/advisories/mfsa2025-70/
• https://www.mozilla.org/security/advisories/mfsa2025-72/

CVE-2025-23311

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests. A successful exploit of this vulnerability might lead to remote code execution, denial of service, information disclosure, or data tampering.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23311
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23311

CVE-2025-23310

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffer overflow by specially crafted inputs. A successful exploit of this vulnerability might lead to remote code execution, denial of service, information disclosure, and data tampering.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23310
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23310

CVE-2025-23317

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a specially crafted HTTP request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23317
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23317

CVE-2025-23318

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23318
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23318

CVE-2025-23319

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23319
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23319

CVE-2025-23331

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive size value, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23331
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23331

CVE-2025-23322

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a stream is cancelled before it is processed. A successful exploit of this vulnerability might lead to denial of service.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23322
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23322

CVE-2025-23323

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23323
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23323

CVE-2025-23321

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero issue by issuing an invalid request. A successful exploit of this vulnerability might lead to denial of service.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23321
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23321

CVE-2025-23324

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23324
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23324

CVE-2025-23325

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolled recursion through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23325
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23325

CVE-2025-23326

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23326
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23326

CVE-2025-23327

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through specially crafted inputs. A successful exploit of this vulnerability might lead to denial of service and data tampering.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23327
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23327

CVE-2025-23320

2025-08-06 13:15 UTC

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause the shared memory limit to be exceeded by sending a very large request. A successful exploit of this vulnerability might lead to information disclosure.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2025-23320
• https://nvidia.custhelp.com/app/answers/detail/a_id/5687
• https://www.cve.org/CVERecord?id=CVE-2025-23320

CVE-2025-23277

2025-08-02 22:15 UTC

NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or information disclosure.

References:

• https://https://nvidia.custhelp.com/app/answers/detail/a_id/5670

CVE-2025-23278

2025-08-02 22:15 UTC

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering  or denial of service.

References:

• https://nvidia.custhelp.com/app/answers/detail/a_id/5670

CVE-2025-23281

2025-08-02 22:15 UTC

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race condition might be able to trigger a use-after-free error. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

References:

• https://nvidia.custhelp.com/app/answers/detail/a_id/5670

CVE-2025-8714

2025-08-14 13:15 UTC

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pg_dumpall is also affected. pg_restore is affected when used to generate a plain-format dump. This is similar to MySQL CVE-2024-21096. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected.

References:

• https://www.postgresql.org/support/security/CVE-2025-8714/

CVE-2025-8715

2025-08-14 13:15 UTC

Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpose-crafted object name. The same attacks can achieve SQL injection as a superuser of the restore target server. pg_dumpall, pg_restore, and pg_upgrade are also affected. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected. Versions before 11.20 are unaffected. CVE-2012-0868 had fixed this class of problem, but version 11.20 reintroduced it.

References:

• https://www.postgresql.org/support/security/CVE-2025-8715/

CVE-2025-42957

2025-08-12 03:15 UTC

SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.

References:

• https://me.sap.com/notes/3627998
• https://url.sap/sapsecuritypatchday

CVE-2025-54987

2025-08-05 13:15 UTC

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.

References:

• https://success.trendmicro.com/en-US/solution/KA-0020652

CVE-2025-54948

2025-08-05 13:15 UTC

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

References:

• https://success.trendmicro.com/en-US/solution/KA-0020652

CVE-2025-8088

2025-08-08 12:15 UTC

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

References:

• https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5
• https://support.dtsearch.com/faq/dts0245.htm
• https://www.vicarius.io/vsociety/posts/cve-2025-8088-detect-winrar-zero-day
• https://www.vicarius.io/vsociety/posts/cve-2025-8088-mitigate-winrar-zero-day-using-srp-and-ifeo
• https://www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day-vulnerability/#the-discovery-of-cve-2025-8088

CVE-2025-49457

2025-08-12 23:15 UTC

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access

References:

• https://www.zoom.com/en/trust/security-bulletin/zsb-25030