Alerts

Google has released an updated Chrome version 138.0.7204.183/.184 for Windows, Mac, and 138.0.7204.183 for Linux. The addressed vulnerability could allow the remote attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Google Chrome Code Execution Vulnerability (CVE-2025-8292): CVSS: 8.8 Attack Vector: Network

Tenable has released security updates to address several vulnerabilities across Tenable Patch Management and third-party components (sqlite, ua-parser-js, libxml2, libxslt, Erlang OTP, Curl, nodeJS, and .NET) that are used by multiple Tenable products. The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, conduct man-in-the-middle and spoofing attacks, manipulate data, gain elevated privileges, or

SolarWinds has released security updates to address multiple vulnerabilities affecting SolarWinds SWOSH and SolarWinds Web Help Desk. The addressed vulnerabilities could allow the attacker to obtain sensitive information or gain elevated privileges to the affected product. The addressed vulnerabilities: 1. SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Privilege Escalation Vulnerability (CVE-2025-26397): CVSS: 7.8 Attack Vector:

Mozilla has released an updated Firefox version 141, Firefox ESR versions 140.1, 128.13, and 115.26 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to perform a denial of service attack, bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, and gain access to the affected system. Sample of

Google has released an updated Chrome version 138.0.7204.168/.169 for Windows, Mac, and 138.0.7204.168 for Linux. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google Chrome Code Execution Vulnerability (CVE-2025-8010):

Microsoft has released an updated version of Microsoft Edge in the stable channel, “138.0.3351.95” to address multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions or execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed

Grafana has released security updates to address multiple vulnerabilities affecting Grafana. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions or perform Cross-Site Scripting attacks against the affected product. Sample of the addressed vulnerabilities: 1. Grafana Cross-Site-Scripting (XSS) via scripted dashboards (CVE-2025-6023): CVSS: 7.6 Attack Vector: Network Attack Complexity: Low Privileges Required:

Palo Alto has released security updates to fix several vulnerabilities affecting multiple Palo Alto products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, obtain sensitive information, or gain elevated privileges on the affected system. Sample of the addressed vulnerabilities: 1. Palo Alto GlobalProtect Authenticated Code Injection Vulnerability (CVE-2025-4232): CVSS: 7.1 Attack Vector:

Aruba has released security updates to fix several vulnerabilities across multiple HPE Aruba products. The addressed vulnerabilities could allow the attacker to perform denial of service attacks, bypass security restrictions, obtain sensitive information, execute arbitrary code, and gain access to the affected system. Sample of the addressed vulnerabilities: 1. HPE AutoPass License Server Remote Code

Google has released an updated Chrome version 138.0.7204.157/.158 forn Windows, Mac, and 138.0.7204.157 for Linux. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions via a crafted HTML page, or execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of

Apache has released security updates to address several vulnerabilities affecting multiple Apache Tomcat versions. The addressed vulnerabilities could allow the attacker to perform denial of service attacks, bypass security restrictions, or gain access to the affected system by using icacls.exe without specifying a full path. Sample of the addressed vulnerabilities: 1. Apache Tomcat Side-loading via