Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Tenda AC8v4 stack overflow vulnerability (CVE-2024-57703)

CVE number – CVE-2024-57703 The Tenda AC8v4 V16.03.34.06 firmware has a stack overflow vulnerability in the setSchedWifi function. The src variable receives the schedStartTime parameter from

Read More
NewsSecurity Vulnerabilities

Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability (CVE-2025-21331)

CVE Number – CVE-2025-21331 This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker

Read More
NewsSecurity Vulnerabilities

Microsoft Office Word RTF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVE-2025-21298)

CVE number = CVE-2025-21298 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word.

Read More
NewsSecurity Vulnerabilities

Google Chrome VideoFrame Use-After-Free Remote Code Execution Vulnerability (CVE-2024-2886)

CVE number = CVE-2024-2886 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Google Chrome. User

Read More
NewsSecurity Vulnerabilities

Linux kernel vulnerability (CVE-2024-57880)

CVE number = CVE-2024-57880 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Add space for

Read More
NewsSecurity Vulnerabilities

Apple macOS libFontValidation Font Glyph YCoordinate Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the libFontValidation library

Read More
NewsSecurity Vulnerabilities

SonicWALL NSv Cryptographically Weak PRNG Authentication Bypass Vulnerability (CVE-2024-40762)

CVE number – CVE-2024-40762 This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL NSv. Authentication is

Read More
NewsSecurity Vulnerabilities

Ivanti Connect Secure VPN Zero-Day Exploitation (CVE-2025-0282)

Ivanti has reported two vulnerabilities, CVE-2025-0282 and CVE-2025-0283, affecting Ivanti Connect Secure (ICS) VPN appliances. Mandiant has observed active exploitation

Read More
NewsSecurity Vulnerabilities

Cisco ThousandEyes Agent Certificate Validation Vulnerability (CVE-2025-20126)

CVE number CVE-2025-20126 A vulnerability in certification validation routines of Cisco ThousandEyes Endpoint Agent for macOS and RoomOS could allow

Read More
NewsSecurity Vulnerabilities

Cisco Crosswork Network Controller Stored Cross-Site Scripting Vulnerabilities (CVE-2025-20123)

CVE number – CVE-2025-20123 Multiple vulnerabilities in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated,

Read More