Jun 17, 2025
2 new incidents, 0 with updates.
Started
- ClosedPatched
CitrixBleed 2: NetScaler memory leak exploited to hijack sessions
An out-of-bounds read in NetScaler ADC and Gateway leaked memory, including session tokens, to unauthenticated attackers. GreyNoise saw exploitation from June 23, before public PoCs on July 4. After patching, admins had to kill all active ICA, PCoIP, RDP, AAA and LB sessions.
Citrix NetScaler ADC and GatewayClosed Jul 10, 2025
- ClosedPatched
Linux Kernel: Kernel Improper Ownership Management Vulnerability
Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system. Added to CISA KEV on 2025-06-17.
Linux KernelClosed Jun 17, 2025
