Clement Lecigne

Google Chrome, Microsoft Edge, Opera, and Opera GX are affected by a high-severity zero-day vulnerability (CVE-2025-5419) in the V8 JavaScript engine. This vulnerability is an out-of-bounds read and write flaw that allows a remote attacker to potentially execute arbitrary code, leading to heap corruption via a crafted HTML page. The vulnerability is actively exploited in the wild. Attackers can exploit this flaw by luring victims to malicious websites. The vulnerability affects the V8 JavaScript and WebAssembly engine.

The issue is related to a weakness in the Linux kernel's network, specifically in the ` dst negative advice()` function, which does not enforce proper RCU rules when `sk->dst cache` must be cleared, leading to possible use-after-free (UAF). This could allow remote code execution with system execution privileges needed, and user interaction is not required for exploitation. The vulnerability has been actively exploited in real-world scenarios, posing a severe risk to Android users.

A memory corruption issue was addressed with improved locking, which may lead to arbitrary code execution when processing web content. This issue is reportedly exploited against versions of iOS before iOS 16.7.1. The vulnerability is caused by a buffer overflow in the WebKit module, allowing an attacker to execute arbitrary code.

The issue is related to an out-of-bounds read in the WebKit web browser engine, which may allow an attacker to disclose sensitive information when processing web content. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

An issue exists in the way Windows Search and Microsoft Office process input data, specifically related to HTML. A remote attacker can execute arbitrary code on a system by inducing a user to open a specially crafted malicious Microsoft Office document. This flaw allows for a Mark-of-the-Web (MotW) bypass, enabling the planting of files without the MotW security attribute using Windows Search.

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. The issue is related to missing locks in `SNDRV CTL IOCTL ELEM {READ|WRITE}32` that can be used in a use-after-free, resulting in a privilege escalation to gain ring0 access from the system user. The vulnerability can be exploited to cause a denial of service and gain unauthorized access to protected information. It has been found exploited in the wild, affecting Linux systems.

The issue is related to a type confusion vulnerability in the V8 JavaScript engine of Google Chrome, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability has been exploited in the wild, and its severity is considered high. The vulnerability exists in how V8 handles the parsing of class static blocks within arrow function heads, particularly with the 'this' keyword. It leverages bytecode flushing for exploitation and is a non-trivial feedback slot type confusion in V8.

The issue is related to a heap buffer overflow in the GPU component of Google Chrome, allowing a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The severity of this issue is classified as High by Chromium. This vulnerability can be exploited by a remote attacker, potentially leading to a sandbox escape.

The issue is related to insufficient validation of untrusted input in Intents, allowing a remote attacker to redirect the browser to a malicious URL via a crafted HTML page. This can be exploited by a remote attacker to gain access to the system.

The issue is related to a type confusion in V8, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability is caused by incorrect type handling in the JavaScript engine V8. It has been reported that this vulnerability was exploited in real-world attacks.

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 12.5.2 Apple iOS versions prior to 14.4.2 Apple iPadOS versions prior to 14.4.2 Apple watchOS versions prior to 7.3.3 Description: This issue is related to the WebKit module in Apple's operating systems, which may allow a remote attacker to perform cross-site scripting attacks by processing maliciously crafted web content. Apple is aware of a report that this issue may have been actively exploited. The estimated number of potentially affected devices worldwide is not specified. Recommendations: For Apple iOS versions prior to 12.5.2, update to iOS 12.5.2 or later. For Apple iOS versions prior to 14.4.2, update to iOS 14.4.2 or later. For Apple iPadOS versions prior to 14.4.2, update to iPadOS 14.4.2 or later. For Apple watchOS versions prior to 7.3.3, update to watchOS 7.3.3 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.4.1 iPadOS versions prior to 14.4.1 Safari versions prior to 14.0.3 watchOS versions prior to 7.3.2 macOS Big Sur versions prior to 11.2.3 Description: A memory corruption issue was addressed with improved validation. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to insufficient input validation in the WebKit module used by the Safari browser, which could allow a remote attacker to execute arbitrary code using a specially crafted malicious web page. Recommendations: For iOS versions prior to 14.4.1, update to iOS 14.4.1 or later. For iPadOS versions prior to 14.4.1, update to iPadOS 14.4.1 or later. For Safari versions prior to 14.0.3, update to Safari 14.0.3 or later. For watchOS versions prior to 7.3.2, update to watchOS 7.3.2 or later. For macOS Big Sur versions prior to 11.2.3, update to macOS Big Sur 11.2.3 or later.

The issue is related to a type confusion in the V8 engine of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code execution. The vulnerability has been reportedly exploited in real-world incidents, including a case where it was used to achieve remote code execution on a Tesla Model 3.

A memory corruption issue was addressed with improved input validation, allowing an application to potentially gain elevated privileges. The issue is related to a buffer overflow in dynamic memory.

A memory corruption issue was addressed with improved input validation, allowing an application to potentially execute arbitrary code with kernel privileges. The issue is related to a buffer overflow in dynamic memory.

The issue is caused by a memory corruption vulnerability in the scripting engine of Internet Explorer, allowing a remote attacker to execute arbitrary code with the help of a specially crafted web page. This could lead to the corruption of memory, enabling an attacker to execute code in the context of the current user. If the current user has administrative rights, the attacker could gain control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to a double free vulnerability in the `get chunk header` function. This vulnerability allows remote attackers to cause a denial of service, resulting in the application crashing, and possibly execute arbitrary code via a crafted TiVo file.

The issue is related to multiple vulnerabilities in various Linux kernel packages. These vulnerabilities can be exploited remotely, potentially leading to a violation of confidentiality, integrity, and availability of protected information. The sock getsockopt function in the Linux kernel does not initialize a certain structure member, allowing local users to obtain potentially sensitive information from kernel memory via an SO BSDCOMPAT getsockopt request.