Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 2401-2425 di 3852 risultati

Pagina 97 di 155

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2025-38208 smb: client: add NULL check in automount_fullpath	18-02-2026	2401
MSRC Security Update	CVE-2025-40914 Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow	18-02-2026	2402
MSRC Security Update	CVE-2022-27649 A flaw was found in Podman where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.	18-02-2026	2403
MSRC Security Update	CVE-2024-6603 In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.	18-02-2026	2404
MSRC Security Update	CVE-2025-39711 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls	18-02-2026	2405
MSRC Security Update	CVE-2025-7783 Usage of unsafe random function in form-data for choosing boundary	18-02-2026	2406
MSRC Security Update	CVE-2024-39479 drm/i915/hwmon: Get rid of devm	18-02-2026	2407
MSRC Security Update	CVE-2025-37766 drm/amd/pm: Prevent division by zero	18-02-2026	2408
MSRC Security Update	CVE-2024-4778 Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126.	18-02-2026	2409
MSRC Security Update	CVE-2023-6129 POLY1305 MAC implementation corrupts vector registers on PowerPC	18-02-2026	2410
MSRC Security Update	CVE-2022-30629 Session tickets lack random ticket_age_add in crypto/tls	18-02-2026	2411
MSRC Security Update	CVE-2024-57896 btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount	18-02-2026	2412
MSRC Security Update	CVE-2025-21853 bpf: avoid holding freeze_mutex during mmap operation	18-02-2026	2413
MSRC Security Update	CVE-2025-68741 scsi: qla2xxx: Fix improper freeing of purex item	18-02-2026	2414
MSRC Security Update	CVE-2024-28085 wall in util-linux through 2.40 often installed with setgid tty permissions allows escape sequences to be sent to other users' terminals through argv. (Specifically escape sequences received from stdin are blocked but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.	18-02-2026	2415
MSRC Security Update	CVE-2021-3602 An information disclosure flaw was found in Buildah when building containers using chroot isolation. Running processes in container builds (e.g. Dockerfile RUN commands) can access environment variables from parent and grandparent processes. When run in a container in a CI/CD environment environment variables may include sensitive information that was shared with the container in order to be used only by Buildah itself (e.g. container registry credentials).	18-02-2026	2416
MSRC Security Update	CVE-2025-38226 media: vivid: Change the siize of the composing	18-02-2026	2417
MSRC Security Update	CVE-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto	18-02-2026	2418
MSRC Security Update	CVE-2024-35176 REXML contains a denial of service vulnerability	18-02-2026	2419
MSRC Security Update	CVE-2025-37830 cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()	18-02-2026	2420
MSRC Security Update	CVE-2024-35878 of: module: prevent NULL pointer dereference in vsnprintf()	18-02-2026	2421
MSRC Security Update	CVE-2025-6020 Linux-pam: linux-pam directory traversal	18-02-2026	2422
MSRC Security Update	CVE-2025-21979 wifi: cfg80211: cancel wiphy_work before freeing wiphy	18-02-2026	2423
MSRC Security Update	CVE-2025-68345 ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()	18-02-2026	2424
MSRC Security Update	CVE-2024-6612 CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128.	18-02-2026	2425