A critical NVIDIA Container Toolkit vulnerability patch (CVE-2024-0132) remains incomplete, leaving systems vulnerable to container escape attacks. Trend Micro discovered the Time-of-Check Time-of-Use flaw persists in version 1.17.4 when "allow-cuda-compat-libs-from-container" is enabled, ...
Critical vulnerability (CVE-2025-23359, CVSS 8.3) in NVIDIA Container Toolkit allows attackers to bypass container isolation and access host systems through a TOCTOU flaw. The issue affects versions up to 1.17.3 and GPU Operator up to 24.9.1, enabling unauthorized access to host files and ...
Apache Tomcat releases critical security patches for remote code execution vulnerabilities (CVE-2024-56337 and CVE-2024-50379) affecting multiple versions. The issues involve TOCTOU race conditions on case-insensitive file systems. Users must upgrade to latest versions and adjust Java conf...
Apache releases critical security patches for Tomcat web server to fix a remote code execution vulnerability (CVE-2024-56337) affecting versions 9.x, 10.x, and 11.x. The flaw, caused by a TOCTOU race condition, requires immediate updates to versions 11.0.2, 10.1.34, or 9.0.98, along with s...
