InfoSecBulletin Cybersecurity for mankind

Broadcom has urgently alerted about four serious vulnerabilities in VMware ESXi, Workstation, Fusion, and Tools, with CVSS scores up to 9.3. Reported by leading security researchers at Pwn2Own, these flaws present major risks to organizations using virtual infrastructure. CVE-2025-41236 – Integer Overflow in VMXNET3 (CVSS 9.3) A vulnerability in the …

Oracle’s July 2025 Critical Patch Update was released fixing 309 security vulnerabilities across its products. The update impacts 34 key product families. Oracle Communications has the most patches at 112 vulnerabilities, followed by MySQL with 40 and Oracle Fusion Middleware. 145 remote vulnerabilities could be exploited without authentication, allowing attackers …

Microsoft has quietly revealed that it will stop adding new features to Office apps (Microsoft 365) for Windows 10 users in August 2026. While security updates will remain in place for Office apps running on Windows 10 until October 2028, Microsoft will cut off new feature support gradually next year. …