Multiple vulnerabilities have been reported in Google Android, which could allow a remote attacker to gain elevated privileges, obtain sensitive information or cause denial of service (DoS) on the targeted system.

Software Affected:

Google Android versions 13, 14, 15, 16

Apply appropriate updates when made available by respective OEMs.

https://source.android.com/docs/security/bulletin/2025-12-01

Multiple vulnerabilities have been reported in Google Chrome which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Google Chrome versions prior to 142.0.7444.175/.176 for Windows

Google Chrome versions prior to 142.0.7444.176 for Mac

Google Chrome versions prior to 142.0.7444.175 for Linux

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html

A vulnerability has been reported in Apple Compressor, which could be exploited by an attacker to execute arbitrary code on the targeted system.

Software Affected:

Apple Compressor versions prior to 4.11.1 (for macOS Sequoia 15.6 and later)

Apply appropriate updates as mentioned below:

https://support.apple.com/en-us/125693

Multiple vulnerabilities have been reported in Microsoft Edge (Chromium-based) which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Microsoft Edge Stable Channel (Chromium-based) versions prior to 142.0.3595.90

Apply the appropriate security updates released by Microsoft:

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#november-18-2025

A vulnerability has been reported in WhatsApp, which could allow an attacker to bypass security restriction on the targeted device.

Software Affected:

WhatsApp for iOS version prior to 2.25.23.73

WhatsApp Business for iOS version 2.25.23.82

WhatsApp for Mac version 2.25.23.83

Apply appropriate updates as mentioned below:

https://www.whatsapp.com/security/advisories/2025

A remote code execution vulnerability has been reported in Microsoft Graphic Components (GDI+) which could allow an attacker to execute arbitrary code or information disclosure on the targeted system.

Software Affected:

Windows Server 2016 & 2025

Windows Server 2012,2012 R2, 2016,2019, 2022 & 2025

Windows 10 Version 1607 for x64-based & 32-bit Systems

Windows 10 Version 22H2 for 32-bit & ARM64-based Systems

Windows 11 Version 23H2 for x64-based & ARM64-based Systems

Windows 11 Version 24H2 for x64-based & ARM64-based Systems

Windows 11 Version 25H2 for x64-based & ARM64-based Systems

Windows Server 2012,2012 R2,2016,2019,2022,23H2 Edition & 2025(Server Core installation)

Windows Server 2008 R2 for x64-based Systems SP1 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems SP1 & SP2

Windows Server 2008 for x64-based Systems SP2 (Server Core installation)

Windows Server 2008 for 32-bit Systems SP2 (Server Core installation)

Windows Server 2008 for 32-bit Systems SP2

Windows 10 Version 22H2 for x64-based Systems

Windows 10 Version 21H2 for x64-based,ARM64-based & 32-bit Systems

Windows 10 Version 1809 for x64-based & 32-bit Systems

Microsoft Office LTSC for Mac 2021 & 2024

Microsoft Office for Android

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-60724

Multiple vulnerabilities have been reported in Zoom products, which could be exploited by an attacker to trigger elevation of privilege, conduct cross site scripting attacks and disclosure of sensitive information on the targeted system.

Software Affected:

Zoom Workplace for macOS before version 6.5.10

Zoom Workplace (various clients) before version 6.5.10

Zoom Workplace VDI Client for Windows before version 6.5.10

Zoom Workplace VDI Plugin for macOS (Universal Installer) before versions 6.3.14, 6.4.14, and 6.5.10

Zoom Workplace for Android before version 6.5.10

Zoom Clients / Meeting SDK / Workplace SDK

https://www.zoom.com/en/trust/security-bulletin/zsb-25040/

https://www.zoom.com/en/trust/security-bulletin/zsb-25041/

https://www.zoom.com/en/trust/security-bulletin/zsb-25042/

https://www.zoom.com/en/trust/security-bulletin/zsb-25043/

https://www.zoom.com/en/trust/security-bulletin/zsb-25044/

https://www.zoom.com/en/trust/security-bulletin/zsb-25045/

https://www.zoom.com/en/trust/security-bulletin/zsb-25046/

https://www.zoom.com/en/trust/security-bulletin/zsb-25047/

https://www.zoom.com/en/trust/security-bulletin/zsb-25048/

Microsoft Edge (Chromium-based) is a web browser developed by Microsoft using the Chromium engine, offering fast performance, enhanced security, and compatibility with modern web standards while integrating with Microsoft services.

Software Affected:

Microsoft Edge (Chromium-based) version before 142.0.3595.80

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#november-13-2025

Google Chrome is a popular internet browser that is used for accessing the information available on the World Wide Web. It is designed for use on desktop computers, such as those running on windows, macOS, or Linux operating system.

Software Affected:

Google Chrome versions before 142.0.7444.162/.163 for Windows

Google Chrome versions before 142.0.7444.162 for Linux and Mac

https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_11.html

Multiple vulnerabilities have been reported in Apple Products, which could allow an attacker to execute arbitrary code, gain elevated privileges, disclose sensitive information, bypass security restrictions or can cause denial of service condition on the targeted system.

Software Affected:

Apple iOS and iPadOS versions before 26.1

Apple iOS and iPadOS versions before 18.7.2

Apple macOS Tahoe versions before 26.1

Apple macOS Sequoia versions before 15.7.2

Apple macOS Sonoma versions before 14.8.2

Apple TVOS versions before 26.1

Apple watchOS versions before 26.1

Apple visionOS versions before 26.1

Apple Safari versions before 26.1

Apple Xcode versions before 26.1

https://support.apple.com/en-us/125632

https://support.apple.com/en-us/125633

https://support.apple.com/en-us/125634

https://support.apple.com/en-us/125635

https://support.apple.com/en-us/125636

https://support.apple.com/en-us/125637

https://support.apple.com/en-us/125638

https://support.apple.com/en-us/125639

https://support.apple.com/en-us/125640

https://support.apple.com/en-us/125641

Multiple vulnerabilities have been reported in Google Chrome for Desktop, which could be exploited by a remote attacker to execute arbitrary code and bypass security restriction on the targeted system.

Software Affected:

Google Chrome versions before 142.0.7444.134/.135 for Windows

Google Chrome versions before 142.0.7444.135 for Mac

Google Chrome versions before 142.0.7444.134 for Linux

https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html

Multiple vulnerabilities have been reported in Microsoft Edge Stable (Chromium-based) which could allow a remote attacker to execute arbitrary code or data manipulation on the targeted system.

Software Affected:

Microsoft Edge Stable Channel (Chromium-based) versions before 142.0.3595.65

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#november-5-2025

Multiple vulnerabilities have been reported in Google Android, which could be exploited by an attacker to gain elevated privileges or execute arbitrary code on the targeted system.

Software Affected:

Google Android versions 13, 14, 15, 16.

https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-secu

Multiple vulnerabilities have been reported in Microsoft Edge Stable (Chromium-based) which could allow a remote attacker to execute arbitrary code, bypass security, perform spoofing attack or disclose sensitive information on the targeted system.

Software Affected:

Microsoft Edge Stable Channel (Chromium-based) versions before 141.0.3537.71

https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#october-31-2025

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, bypass security restrictions, perform Spoofing attack or disclose sensitive information on the targeted system.

Software Affected:

Google Chrome versions before 142.0.7444.59 for Linux

Google Chrome versions before 142.0.7444.59/60 for Windows and Mac

Google Chrome versions before 142.0.7444.60 for Mac

https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html

A vulnerability has been reported in Mozilla Firefox, which could allow a remote attacker to execute arbitrary code on a targeted system.

Software Affected:

Mozilla Firefox version before 144.0.2

https://www.mozilla.org/en-US/security/advisories/mfsa2025-86/

A vulnerability has been reported in Microsoft Edge (Chromium-based), which could allow a remote attacker to execute arbitrary code on a targeted system.

Software Affected:

Microsoft Edge (Chromium-based) version before 141.0.3537.85

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#october-17-2025

Multiple vulnerabilities have been reported in Microsoft Products, which could allow an attacker to gain elevated privileges, obtain Information Disclosure, Bypass Security restrictions, conduct remote code execution attacks, perform spoofing attacks, cause a denial of service condition, or tamper with system settings.

Software Affected:

Open Source Software

Apps

Windows

Developer Tools

Microsoft Office

Server Software

System Center

https://msrc.microsoft.com/update-guide/releaseNote/2025-Oct

Multiple vulnerabilities have been reported in Apple Products, which could allow an attacker to execute arbitrary code, gain elevated privileges, disclose sensitive information, bypass security restrictions, or cause a denial of service condition on the targeted system.

Software Affected:

Apple iOS and iPadOS versions before 26, 18.7, 16.7.12, 15.8.5

Apple macOS Tahoe versions before 26

Apple macOS Sequoia versions before 15.7

Apple macOS Sonoma versions before 14.8

Apple TVOS versions before 26

Apple watchOS versions before 26

Apple visionOS versions before 26

Apple Satani versions before 26

Apple Xcode versions before 26

https://support.apple.com/en-us/125108

https://support.apple.com/en-us/125109
https://support.apple.com/en-us/125141
https://support.apple.com/en-us/125142
https://support.apple.com/en-us/125110
https://support.apple.com/en-us/125111
https://support.apple.com/en-us/125112
https://support.apple.com/en-us/125114
https://support.apple.com/en-us/125116
https://support.apple.com/en-us/125115
https://support.apple.com/en-us/125113
https://support.apple.com/en-us/125117

Multiple vulnerabilities have been reported in Microsoft products, which could allow an attacker to bypass security restrictions, gain elevated privileges, obtain sensitive information, and conduct remote code execution, spoofing attacks, or cause a Denial of Service (DoS) condition on the targeted system.

Software Affected:

 Microsoft Auto Update for Mac

 Microsoft Windows

 Microsoft Office

 Microsoft 365 Apps

 Microsoft Edge (Chromium-based)

https://msrc.microsoft.com/update-guide/releaseNote/2025-Sep

Multiple vulnerabilities were reported in Google Chrome for Desktop, allowing remote attackers to execute arbitrary code or disclose sensitive information.

Software Affected:

Google Chrome versions before 141.0.7390.107/.108 for Windows and Mac

Google Chrome versions before 141.0.7390.107 for Linux

https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_14.html

Multiple vulnerabilities were reported in Mozilla products, allowing remote code execution or disclosure of sensitive information.

Software Affected:

Mozilla Firefox for iOS versions before 143.1

Mozilla Firefox versions before 143.0.3

MFSA 2025-79MFSA 2025-80

Multiple vulnerabilities in Microsoft Edge (Chromium-based) could allow remote attackers to obtain sensitive information and execute arbitrary code.

Software Affected:

Microsoft Edge (Chromium-based) versions before 140.0.7339.208

Microsoft Edge Security Release Notes (Sep 25, 2025)

Multiple vulnerabilities could allow a remote attacker to execute arbitrary code, cause denial of service (DoS), or disclose information.

Software Affected:

Google Chrome versions before 140.0.7339.207/.208 for Windows/Mac

Google Chrome versions before 140.0.7339.207 for Linux

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html

A vulnerability has been reported in Apple products, which could be exploited by an attacker to cause denial of service conditions or corrupt process memory on the targeted system. Multiple affected releases are listed below.

Software Affected:

Apple iOS / iPadOS versions before 18.7.1

Apple iOS / iPadOS versions before 26.0.1

Apple macOS Tahoe versions before 26.0.1

Apple macOS Sequoia versions before 15.7.1

Apple macOS Sonoma versions before 14.8.1

Apple visionOS versions before 26.0.1

https://support.apple.com/en-us/125326

https://support.apple.com/en-us/125327

https://support.apple.com/en-us/125328

https://support.apple.com/en-us/125329

https://support.apple.com/en-us/125330

https://support.apple.com/en-us/125338

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Google Chrome versions before 140.0.7339.127/.128 for Windows

Google Chrome versions before 140.0.7339.132/.133 for Mac

Google Chrome versions before 140.0.7339.127 for Linux

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_9.html

Software Affected:

WhatsApp for iOS version before 2.25.21.73

WhatsApp Business for iOS version 2.25.21.78

WhatsApp for Mac version 2.25.21.78

Recently, several media outlets reported the exposure of approximately 16 billion login credentials, including usernames, passwords, authentication tokens, and associated metadata, from platforms such as Apple, Google, Facebook, Telegram, GitHub, and various virtual private network (VPN) services.

Recommendations to mitigate risks

Update Passwords Immediately: Change passwords for all affected services, prioritizing email, banking, social media, and government portals. Create strong, unique passwords (minimum 12 characters, including letters, numbers, and symbols). Avoid reusing passwords across services to prevent credential stuffing attacks. Make it a habit to change your passwords regularly.

Enable Multi-Factor Authentication (MFA): Activate MFA on all accounts that support it, using authenticator apps, hardware tokens, or SMS-based verification.

Transition to Passkeys: Where supported (e.g., Apple, Google), enable passkeys for password-less, phishing-resistant authentication using biometrics or device PINs.

Protect Against Malware: Run antivirus scans to detect and remove infostealer malware. Ensure operating systems, browsers, and applications are updated to address known vulnerabilities.