CVE-2025-6965
published 2025-07-15CVE-2025-6965: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead…
PriorityP270high7.7CVSS 3.1
AVNACHPRLUINSCCLIHAL
EXPLOIT
EPSS
73.50%
99.4th percentile
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_18.6_and_ipados | — | — |
| apple | ios_26_and_ipados | — | — |
| apple | ipados | < 26.0.0 | 26.0.0 |
| apple | iphone_os | < 26.0.0 | 26.0.0 |
| apple | macos | < 26.0.0 | 26.0.0 |
| apple | macos_sequoia | — | — |
| apple | macos_tahoe | — | — |
| apple | tvos | < 26.0.0 | 26.0.0 |
| apple | tvos | — | — |
| apple | tvos | — | — |
| apple | visionos | < 26.0.0 | 26.0.0 |
| apple | visionos | — | — |
| apple | visionos | — | — |
| apple | watchos | < 26.0.0 | 26.0.0 |
| apple | watchos | — | — |
| apple | watchos | — | — |
| debian | sqlite3 | < sqlite3 3.40.1-2+deb12u2 (bookworm) | sqlite3 3.40.1-2+deb12u2 (bookworm) |
| ghost | sqlite3 | >= 0 < 3.40.1-2+deb12u2 | 3.40.1-2+deb12u2 |
| ghost | sqlite3 | >= 0 < 3.46.1-7 | 3.46.1-7 |
| ghost | sqlite3 | >= 0 < 3.46.1-7 | 3.46.1-7 |
| ghost | sqlite3 | >= 0 < 3.8.2-1ubuntu2.2+esm5 | 3.8.2-1ubuntu2.2+esm5 |
| ghost | sqlite3 | >= 0 < 3.11.0-1ubuntu1.5+esm3 | 3.11.0-1ubuntu1.5+esm3 |
| ghost | sqlite3 | >= 0 < 3.22.0-1ubuntu0.7+esm2 | 3.22.0-1ubuntu0.7+esm2 |
| ghost | sqlite3 | >= 0 < 3.31.1-4ubuntu0.7+esm1 | 3.31.1-4ubuntu0.7+esm1 |
| msrc | azl3_sqlite_3.44.0-2 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
commandSELECT COUNT(*) AS c{i}, SUM(val) AS s{i}, AVG(val) AS a{i}, ... FROM ad_cache (300+ aggregates vs 1 column)↗
- →Detect SQLite queries with an abnormally large number of aggregate terms (COUNT, SUM, AVG, etc.) exceeding the number of columns in the target table — the PoC uses 300+ aggregate expressions against a single-column table to trigger the heap overflow. ↗
- →Monitor Windows Event Viewer Application Log for winsqlite3.dll Access Violation (exception code 0xC0000005), which indicates successful heap corruption trigger. ↗
- →Monitor for unexpected stop/start of Active Directory-related Windows services (e.g., via 'net stop' / 'net start') combined with SQLite database file writes to AD cache directories, which may indicate exploitation attempts. ↗
- →The vulnerability is triggered when the number of aggregate terms exceeds the number of available columns, causing memory corruption. Flag SQL statements where aggregate function count greatly exceeds the column count of the queried table. ↗
- ·The PoC targets winsqlite3.dll on Windows Server in an Active Directory context, but the underlying SQLite vulnerability is cross-platform and affects any application embedding SQLite < 3.50.2, including Oracle MySQL Docker Images, Apple tvOS/watchOS/visionOS, and Ubuntu Linux packages. ↗
- ·Oracle rates this CVE as CVSS 9.8 with remote exploitability via the MySQL Protocol in Docker Images shipping SQLite, broadening the attack surface beyond local/Windows-only scenarios. ↗
- ·Ubuntu USN-7679-1 confirms the impact ranges from denial of service (crash) to possible arbitrary code execution, and a standard system update (upgrading the SQLite package) is the remediation path on Linux. ↗
CVSS provenance
nvdv3.17.7HIGHCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
nvdv4.07.2HIGHCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green
osv7.2HIGH
vendor_msrc9.8CRITICAL
vendor_oracle9.8HIGH
vendor_debian7.2HIGH
vendor_redhat7.2HIGH
vendor_ubuntu5.6MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SIDIS Prime
cisa_ics·2026-03-12·CVSS 7.5
[HIGH] Siemens SIDIS Prime
ICS Advisory
##
Siemens SIDIS Prime
Release DateMarch 12, 2026
Alert CodeICSA-26-071-03
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## Summary
SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.
The following versions of Siemens SIDIS Prime are affected:
- SIDIS Prime vers:intdot/<4.0.800 (CVE-2024-29857, CVE-2024-30171, CVE-2024-30172, CVE-2024-41996, CVE-2025-6965, CVE-2025-7783, CVE-2025-9230, CVE-2025-9232, CVE-2025-9670, CVE-2025-12816, CVE-2025-15284, CVE-2025-58751, CVE-2025-58752, CVE-2025-58754, CVE-202
Oracle
Oracle Oracle MySQL Risk Matrix: Server: Docker Images (SQLite) — CVE-2025-6965
vendor_oracle·2026-01-15·CVSS 9.8
CVE-2025-6965 [HIGH] Oracle Oracle MySQL Risk Matrix: Server: Docker Images (SQLite) — CVE-2025-6965
Oracle Oracle MySQL Risk Matrix: Server: Docker Images (SQLite) vulnerability
CVE: CVE-2025-6965
CVSS: 9.8
Protocol: MySQL Protocol
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2026 (JAN 2026)
Oracle
Oracle Oracle Communications Applications Risk Matrix: Installation (SQLite) — CVE-2025-6965
vendor_oracle·2025-10-15·CVSS 9.8
CVE-2025-6965 [HIGH] Oracle Oracle Communications Applications Risk Matrix: Installation (SQLite) — CVE-2025-6965
Oracle Oracle Communications Applications Risk Matrix: Installation (SQLite) vulnerability
CVE: CVE-2025-6965
CVSS: 9.8
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2025 (OCT 2025)
Apple
CVE-2025-6965: watchOS 26
vendor_apple·2025-09-15·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: watchOS 26
Apple Security Update: About the security content of watchOS 26
Product: watchOS
Version: 26
CVE: CVE-2025-6965
Component: CVE-2025-6965
Apple
CVE-2025-6965: visionOS 26
vendor_apple·2025-09-15·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: visionOS 26
Apple Security Update: About the security content of visionOS 26
Product: visionOS
Version: 26
CVE: CVE-2025-6965
Component: CVE-2025-6965
Apple
CVE-2025-6965: macOS Tahoe 26
vendor_apple·2025-09-15·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: macOS Tahoe 26
Apple Security Update: About the security content of macOS Tahoe 26
Product: macOS Tahoe
Version: 26
CVE: CVE-2025-6965
Component: CVE-2025-6965
Apple
CVE-2025-6965: tvOS 26
vendor_apple·2025-09-15·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: tvOS 26
Apple Security Update: About the security content of tvOS 26
Product: tvOS
Version: 26
CVE: CVE-2025-6965
Component: CVE-2025-6965
Apple
CVE-2025-6965: iOS 26 and iPadOS 26
vendor_apple·2025-09-15·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: iOS 26 and iPadOS 26
Apple Security Update: About the security content of iOS 26 and iPadOS 26
Product: iOS 26 and iPadOS
Version: 26
CVE: CVE-2025-6965
Component: CVE-2025-6965
Apple
CVE-2025-6965: tvOS 18.6
vendor_apple·2025-07-29·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: tvOS 18.6
Apple Security Update: About the security content of tvOS 18.6
Product: tvOS
Version: 18.6
CVE: CVE-2025-6965
Component: CVE-2025-6965
Ubuntu
SQLite vulnerabilities
vendor_ubuntu·2025-07-29·CVSS 5.6
CVE-2025-29088 [MEDIUM] SQLite vulnerabilities
Title: SQLite vulnerabilities
Summary: Several security issues were fixed in SQLite.
It was discovered that SQLite incorrectly handled aggregate terms. An
attacker could use this issue to cause SQLite to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2025-6965)
It was discovered that SQLite incorrectly handled certain argument values
to sqlite3_db_config(). An attacker could use this issue to cause SQLite to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This update fixes the issue in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,
and
Ubuntu 18.04 LTS. This issue was previously fixed in Ubuntu 20.04 LTS via
USN-7528-1. (CVE-2025-29088)
Instructions: In general, a standard system update will make all the necessary changes.
Apple
CVE-2025-6965: macOS Sequoia 15.6
vendor_apple·2025-07-29·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: macOS Sequoia 15.6
Apple Security Update: About the security content of macOS Sequoia 15.6
Product: macOS Sequoia
Version: 15.6
CVE: CVE-2025-6965
Component: CVE-2025-6965
Apple
CVE-2025-6965: watchOS 11.6
vendor_apple·2025-07-29·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: watchOS 11.6
Apple Security Update: About the security content of watchOS 11.6
Product: watchOS
Version: 11.6
CVE: CVE-2025-6965
Component: CVE-2025-6965
Apple
CVE-2025-6965: iOS 18.6 and iPadOS 18.6
vendor_apple·2025-07-29·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: iOS 18.6 and iPadOS 18.6
Apple Security Update: About the security content of iOS 18.6 and iPadOS 18.6
Product: iOS 18.6 and iPadOS
Version: 18.6
CVE: CVE-2025-6965
Component: CVE-2025-6965
Apple
CVE-2025-6965: visionOS 2.6
vendor_apple·2025-07-29·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: visionOS 2.6
Apple Security Update: About the security content of visionOS 2.6
Product: visionOS
Version: 2.6
CVE: CVE-2025-6965
Component: CVE-2025-6965
Ubuntu
SQLite vulnerability
vendor_ubuntu·2025-07-28
CVE-2025-6965 SQLite vulnerability
Title: SQLite vulnerability
Summary: SQLite could be made to crash or run programs if it received specially
crafted input.
It was discovered that SQLite incorrectly handled certain numbers of
aggregate terms. An attacker could use this issue to cause SQLite to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
sqlite: Integer Truncation in SQLite
vendor_redhat·2025-07-15·CVSS 7.2
CVE-2025-6965 [HIGH] CWE-197 sqlite: Integer Truncation in SQLite
sqlite: Integer Truncation in SQLite
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
A memory corruption flaw was found in SQLite. Under specific conditions a query can be generated where the number of aggregate terms could exceed the number of columns available. This issue could lead to memory corruption and subsequent unintended behavior.
Statement: This vulnerability in SQLite is categorized as Important rather than Critical because, although it involves memory corruption, the conditions required to trigger it are relatively constrained. The flaw arises when a query causes the number of aggrega
Microsoft
Integer Truncation on SQLite
vendor_msrc·2025-07-08·CVSS 9.8
CVE-2025-6965 [HIGH] CWE-197 Integer Truncation on SQLite
Integer Truncation on SQLite
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
Google: Google
Customer Action Required: Yes
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5073723
Ref
Debian
CVE-2025-6965: sqlite3 - There exists a vulnerability in SQLite versions before 3.50.2 where the number o...
vendor_debian·2025·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: sqlite3 - There exists a vulnerability in SQLite versions before 3.50.2 where the number o...
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Scope: local
bookworm: resolved (fixed in 3.40.1-2+deb12u2)
bullseye: open
forky: resolved (fixed in 3.46.1-7)
sid: resolved (fixed in 3.46.1-7)
trixie: resolved (fixed in 3.46.1-7)
OSV
sqlite3 vulnerabilities
osv·2025-07-29·CVSS 5.5
CVE-2025-6965 [MEDIUM] sqlite3 vulnerabilities
sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled aggregate terms. An
attacker could use this issue to cause SQLite to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2025-6965)
It was discovered that SQLite incorrectly handled certain argument values
to sqlite3_db_config(). An attacker could use this issue to cause SQLite to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This update fixes the issue in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and
Ubuntu 18.04 LTS. This issue was previously fixed in Ubuntu 20.04 LTS via
USN-7528-1. (CVE-2025-29088)
GHSA
SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite
ghsa·2025-07-15
CVE-2025-6965 [HIGH] CWE-197 SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite
SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
GHSA
GHSA-2m69-gcr7-jv3q: There exists a vulnerability in SQLite versions before 3
ghsa_unreviewed·2025-07-15
CVE-2025-6965 [HIGH] CWE-197 GHSA-2m69-gcr7-jv3q: There exists a vulnerability in SQLite versions before 3
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
OSV
CVE-2025-6965: There exists a vulnerability in SQLite versions before 3
osv·2025-07-15·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965: There exists a vulnerability in SQLite versions before 3
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
GHSA
Requests vulnerable to .netrc credentials leak via malicious URLs
ghsa·2025-06-09
CVE-2024-47081 [MEDIUM] CWE-522 Requests vulnerable to .netrc credentials leak via malicious URLs
Requests vulnerable to .netrc credentials leak via malicious URLs
### Impact
Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.
### Workarounds
For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).
### References
https://github.com/psf/requests/pull/6965
https://seclists.org/fulldisclosure/2025/Jun/2
No detection rules found.
Bugzilla
CVE-2025-6965 tdlib: Integer Truncation in SQLite [fedora-42]
bugzilla·2025-07-15·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965 tdlib: Integer Truncation in SQLite [fedora-42]
CVE-2025-6965 tdlib: Integer Truncation in SQLite [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from releases that
Bugzilla
CVE-2025-6965 mingw-sqlite: Integer Truncation in SQLite [fedora-42]
bugzilla·2025-07-15·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965 mingw-sqlite: Integer Truncation in SQLite [fedora-42]
CVE-2025-6965 mingw-sqlite: Integer Truncation in SQLite [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from releas
Bugzilla
CVE-2025-6965 sqlite2: Integer Truncation in SQLite [fedora-42]
bugzilla·2025-07-15·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965 sqlite2: Integer Truncation in SQLite [fedora-42]
CVE-2025-6965 sqlite2: Integer Truncation in SQLite [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from releases th
Bugzilla
CVE-2025-6965 qt5-qtwebengine: Integer Truncation in SQLite [fedora-42]
bugzilla·2025-07-15·CVSS 7.2
CVE-2025-6965 [HIGH] CVE-2025-6965 qt5-qtwebengine: Integer Truncation in SQLite [fedora-42]
CVE-2025-6965 qt5-qtwebengine: Integer Truncation in SQLite [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from rel
Qualys
Oracle Critical Patch Update, April 2026 Security Update Review
blogs_qualys·2026-04-22
CVE-2025-6965 Oracle Critical Patch Update, April 2026 Security Update Review
## Table of Contents
Qualys QID Coverage
Notable Oracle Vulnerabilities Patched
Oracle released its second quarterly edition of this year’s Critical Patch Update. The update received patches for 481 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products.
In this quarterly Oracle Critical Patch Update, Oracle Communications received the highest number of patches, 139, constituting about 28% of the total patches released. Oracle Financial Services Applications and Oracle Fusion Middleware followed, with 75 and 59 security patches.
376 of the 481 security patches provided by the April Critical Patch Update (about 78%)
Qualys
Oracle Critical Patch Update, October 2025 Security Update Review
blogs_qualys·2025-10-23
Oracle Critical Patch Update, October 2025 Security Update Review
## Table of Contents
Qualys QID Coverage
Notable Oracle Vulnerabilities Patched
Oracle released its third quarterly edition of this year’s Critical Patch Update. The update received patches for 374 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products.
In this quarterly Oracle Critical Patch Update, Oracle Communications received the highest number of patches, 73, constituting about 19% of the total patches released. Oracle Communications Applications and Oracle Financial Services Applications followed, with 64 and 33 security patches.
298 of the 374 security patches provided by the October Critical Patch Update (
Qualys
Oracle Critical Patch Update, October 2025 Security Update Review | Qualys
blogs_qualys·2025-10-23
Oracle Critical Patch Update, October 2025 Security Update Review | Qualys
#### Table of Contents
- Qualys QID Coverage
- Notable Oracle Vulnerabilities Patched
Oracle released its third quarterly edition of this year’s Critical Patch Update. The update received patches for 374 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products.
In this quarterly Oracle Critical Patch Update, Oracle Communications received the highest number of patches, 73, constituting about 19% of the total patches released. Oracle Communications Applications and Oracle Financial Services Applications followed, with 64 and 33 security patches.
298 of the 374 security patches provided by the October Critical Patch Upd
https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8http://seclists.org/fulldisclosure/2025/Sep/49http://seclists.org/fulldisclosure/2025/Sep/53http://seclists.org/fulldisclosure/2025/Sep/56http://seclists.org/fulldisclosure/2025/Sep/57http://seclists.org/fulldisclosure/2025/Sep/58http://www.openwall.com/lists/oss-security/2025/09/06/1https://cert-portal.siemens.com/productcert/html/ssa-225816.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-485750.html
2025-07-15
Published