Do Son NVIDIA has released a critical security update for BlueField, DOCA, and other products, fixing multiple high-severity flaws that could lead to privilege escalation and DoS.
security update
Google's new Android update patches dozens of flaws, including two actively exploited vulnerabilities and a critical RCE that can be triggered without user interaction.
A new security update for PostgreSQL fixes three vulnerabilities, including two critical flaws that could lead to remote code execution.
Apache Tomcat has released updates for two serious flaws: a session fixation vulnerability and a "MadeYouReset" DoS vulnerability affecting multiple versions.
GitLab has released patches for multiple high-severity vulnerabilities, including several XSS flaws that could lead to account takeover. All users should update immediately.
Microsoft’s August Patch Tuesday fixes 119 flaws, including a publicly disclosed Kerberos zero-day (CVE-2025-53779) that could lead to domain admin privileges.
Chrome 139 fixes high-severity bugs in V8, libaom, and ANGLE that attackers could exploit. Update your browser now to stay protected.
Google released a Chrome Stable Channel update patching CVE-2025-8292, a high-severity Use-After-Free vulnerability in its Media Stream component. Update immediately!
NVIDIA released critical security updates for GPU Display Drivers and vGPU software, patching 14 vulnerabilities that could lead to code execution, privilege escalation, or data leaks.
Google released an urgent Chrome update fixing two high-severity type confusion vulnerabilities (CVE-2025-8010, CVE-2025-8011) in its V8 JavaScript engine. Update immediately!
Grafana Labs issued urgent patches for high-severity XSS (CVE-2025-6023) and medium-severity open redirect (CVE-2025-6197) vulnerabilities, impacting its observability platform.
Google released a critical Chrome update (138.0.7204.157/.158) patching six vulnerabilities, including CVE-2025-6558, a high-severity zero-day actively exploited in the wild. Update immediately!
Google Chrome 137.0.7151.119/.120 is rolling out with crucial security fixes, addressing two high-severity flaws: an integer overflow in V8 and a use-after-free in Profiler.
WAGO Device Manager security updates address two vulnerabilities allowing unauthenticated remote access to sensitive system files.
ASUS warns of a high-severity flaw in Armoury Crate that allows authentication bypass and privilege escalation. Update immediately!
Mozilla has issued an urgent update for Firefox, patching two critical memory corruption flaws (CVSS 9.8) that could allow remote code execution. Update now!
GitLab issues urgent updates for high-severity flaws in CE/EE, including HTML injection (account takeover) and CI/CD code injection. Upgrade to 18.0.2, 17.11.4, or 17.10.8 immediately.
Ivanti patches three Workspace Control flaws exposing sensitive credentials due to hardcoded keys. Update immediately to secure your enterprise.
Google Chrome 137.0.7151.103/.104 fixes two high-severity flaws in media and V8. Update now to protect your system from potential compromise.
Microsoft's June 2025 Patch Tuesday fixes 69 vulnerabilities, including two exploited zero-days in WebDAV and Windows SMB Client. Patch immediately!
QNAP releases urgent patches for high-severity flaws in Qsync Central and File Station 5, enabling RCE and data compromise. Update immediately!
Auth0 Next.js SDK flaw (CVE-2025-48947, CVSS 7.7) could expose session cookies via CDNs. Patch to v4.6.1 immediately to secure your app!