[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (19 articles)

|

// AI-powered summary generated at 08:00

> CVE-2024-46818 drm/amd/display: Check gpio_id before used as array index
Information published.
> CVE-2024-46853 spi: nxp-fspi: fix the KASAN report out-of-bounds bug
Information published.
> XSS in default error page
> CVE-2024-46726 drm/amd/display: Ensure index calculation will not overflow
Information published.
> CVE-2024-46809 drm/amd/display: Check BIOS images before it is used
Information published.
> OpenSSL CVE-2025-15467
> CVE-2019-14584 Null pointer dereference in Tianocore EDK2
Information published.
> CVE-2024-46689 soc: qcom: cmd-db: Map shared memory as WC not WB
Information published.
> SSRF in GUI console
> CVE-2024-46804 drm/amd/display: Add array index check for hdcp ddc access
Information published.
> CVE-2024-46747 HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
Information published.
> SQL injection in forward module
> CVE-2024-46709 drm/vmwgfx: Fix prime with external buffers
Information published.
> CVE-2024-46706 tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
Information published.
> Anthropic Launches Claude Code Security for AI-Powered Vulnerability Scanning
Artificial intelligence (AI) company Anthropic has begun to roll out a new security feature for Claude Code that can scan a user's software codebase for vulnerabilities and suggest patches. The capability, called Claude Code Security, is currently available in a limited research preview to Enterpris...
> CVE-2024-44963 btrfs: do not BUG_ON() when freeing tree block after error
Information published.
> CVE-2024-46695 selinuxsmack: don't bypass permissions check in inode_setsecctx hook
Information published.
> CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Roundcube webmail software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are listed below - CVE-2025-49113 (C...
> CVE-2024-8508 Unbounded name compression could lead to Denial of Service
Information published.
> CVE-2024-46707 KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
Information published.