CVE CyberSecurity Database News (Page 111)

Apr 1, 2025 Windows

CVE-2025-21962 - Linux Kernel CIFS Closetimeo Mount Option Integer Overflow Explained

In early 2025, security researchers from the Linux Verification Center (linuxtesting.org) discovered a significant flaw in the Linux kernel’s CIFS (Common Internet File

Apr 1, 2025 Windows

CVE-2025-21964 - Integer Overflow in Linux Kernel CIFS acregmax Handling

Recently, a critical vulnerability was identified and patched in the Linux kernel's CIFS file system relating to the handling of the acregmax mount

Apr 1, 2025 API Exploit

CVE-2025-21934 - API Misuse in Linux Kernel rapidio Subsystem – Details and Exploit Walkthrough

On March 2024, a vulnerability was disclosed in the Linux kernel’s RapidIO subsystem, tracked as CVE-2025-21934. This post will break down what went wrong,

Apr 1, 2025 API Exploit

CVE-2025-3028 - Exploiting a Use-After-Free in Firefox’s XSLTProcessor – How Dangerous JavaScript Code Can Run

In early 2025, a serious vulnerability was discovered and patched in Mozilla Firefox and Thunderbird – specifically affecting how JavaScript can run when transforming documents with

Apr 1, 2025

CVE-2025-22231 - Exploiting a Local Privilege Escalation in VMware Aria Operations

A critical vulnerability, identified as CVE-2025-22231, has been discovered and publicly disclosed in VMware Aria Operations (previously vRealize Operations). This vulnerability allows attackers with local