Alerts

Google has released an updated Chrome version 141.0.7390.65/.66 for Windows, Mac, and 141.0.7390.65 for Linux. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google Chrome Heap Buffer Overflow in

Elastic has released security updates to address several vulnerabilities affecting multiple Elastic products. The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks, obtain sensitive information, or gain elevated privileges to the affected products. Sample of the addressed vulnerabilities: 1. Elastic Kibana Cross-Site Scripting Vulnerability (CVE-2025-25009): CVSS: 8.7 Attack Vector: Network Attack Complexity:

Splunk has released security updates to fix several vulnerabilities across multiple Splunk products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, conduct cross-site scripting attacks, conduct denial of service attacks, or gain access to the affected product. Sample of the addressed vulnerabilities: 1. Splunk Enterprise Unauthenticated Blind Server Side Request Forgery (SSRF)Vulnerability

Google has released an updated Chrome version 141.0.7390.54/55 for Windows, Mac, and 141.0.7390.54 for Linux. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions, cause application instability/crashes, obtain sensitive information, or execute arbitrary code, and gain access to the affected system by persuading a victim to visit a specially crafted website. Sample

Mozilla has released an updated Firefox version 143.0.3 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to bypass security restrictions, obtain sensitive information, execute arbitrary code, and gain access to the affected system. The addressed vulnerabilities: 1. Mozilla Firefox Sandbox escape due to integer overflow in the Graphics: Canvas2D component (CVE-2025-11152): CVSS:

VMware has released security updates to fix several vulnerabilities across multiple VMware products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, manipulate notification emails, gain elevated privileges, conduct denial of service attacks, or gain access to the affected products. Sample of addressed vulnerabilities: 1. VMware vCenter SMTP Header Injection Vulnerability (CVE-2025-41250): CVSS:

Cisco has released security updates to fix several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to perform denial of service attacks, conduct cross-site scripting attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary commands and gain access to the affected product. Sample of addressed vulnerabilities: 1. Cisco IOS XE

Aruba has released security updates to fix several vulnerabilities across multiple HPE Aruba products. The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks, bypass security restrictions, conduct denial of service attacks, obtain sensitive information, or execute arbitrary code and gain access to the affected product. Sample of the addressed vulnerabilities: 1. HPE

Mozilla has released an updated Firefox version 143, Firefox ESR versions 115.28 and 140.3 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to perform spoofing attacks, bypass security restrictions, obtain sensitive information, execute arbitrary code, and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Mozilla Firefox Memory Safety

Google has released an updated Chrome version 140.0.7339.185/.186 for Windows/Mac, and 140.0.7339.185 for Linux. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions, execute arbitrary code, and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google Chrome Use After

Cisco has released security updates to fix several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to perform denial of service attacks, conduct cross-site scripting attacks, perform cross-site request forgery attacks, obtain sensitive information, or bypass security restrictions to the affected product. Sample of addressed vulnerabilities: 1. Cisco Secure Firewall Adaptive