vulnerability XZ Utils vulnerability impacting B&R Products This advisory details a critical vulnerability (CVE-2025-31115) affecting versions of XZ Utils used in B&R Industrial Automation products, specifically the PPC3100, C50, C80, FT50, MT50, T30, T80, and T50. The vulnerability, stemming from a bug in the multithreaded .xz decoder, allows for heap use-after-free and potent… CISA Advisories · Jun 30, 2026 Critical CVE-2025-31115CHxzmemory corruptionheap
vulnerability Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M This advisory details a vulnerability (CVE-2025-53816, CVE-2025-53817, CVE-2025-55188, CVE-2025-11001) within the Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M software. The vulnerability, a heap-based buffer o… CISA Advisories · Jun 30, 2026 High CVE-2025-53816CVE-2025-53817CVE-2025-55188JPbuffer overflowheapdenial of service
vulnerability Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529 Researchers at Google Project Zero discovered and exploited a type confusion vulnerability (CVE-2024-54529) within the coreaudiod system daemon in macOS. The vulnerability, stemming from a double-free, allowed for heap m… Google Project Zero · Jan 30, 2026 Critical CVE-2024-54529CVE-2025-31235macosvulnerabilityheap