Tag: level vulnerability

  • Simon Willison’s Weblog: Quoting Sean Heelan

    Source URL: https://simonwillison.net/2025/May/24/sean-heelan/ Source: Simon Willison’s Weblog Title: Quoting Sean Heelan Feedly Summary: The vulnerability [o3] found is CVE-2025-37899 (fix here), a use-after-free in the handler for the SMB ‘logoff’ command. Understanding the vulnerability requires reasoning about concurrent connections to the server, and how they may share various objects in specific circumstances. o3 was able…

  • The Register: Google patches odd Android kernel security bug amid signs of targeted exploitation

    Source URL: https://www.theregister.com/2025/02/04/google_android_patch_netgear/ Source: The Register Title: Google patches odd Android kernel security bug amid signs of targeted exploitation Feedly Summary: Also, Netgear fixes critical router, access point vulnerabilities Google has released its February Android security updates, including a fix for a high-severity kernel-level vulnerability, which is suspected to be in use by targeted exploits.……