Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-26440 State: PUBLISHED Published: 2025-09-04T17:11:58.203Z Last Updated: 2025-09-06T03:55:46.476Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/b9a047c94deb06ab7ff956e4fb50b19ddd70cf9a - https://android.googlesource.com/platform/frameworks/
latform/frameworks/av/+/b9a047c94deb06ab7ff956e4fb50b19ddd70cf9a - https://android.googlesource.com/platform/frameworks/base/+/b90d4d01e1bfaacae0e1f144075f72b1fb036799 - https://source.android.com/security/bulletin/2025-05-01
CVE ID: CVE-2025-26441 State: PUBLISHED Published: 2025-09-04T17:14:54.679Z Last Updated: 2025-09-05T17:14:53.150Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5e3953251ab50bcdb6058f5e5afc82d6271c6e1e - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26442 State: PUBLISHED Published: 2025-09-04T17:11:59.208Z Last Updated: 2025-09-05T21:03:06.878Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent filters in NLS due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/63f8849244d1817be2729f522a75424c219e9ecb - https://sou
ttps://android.googlesource.com/platform/packages/apps/Settings/+/63f8849244d1817be2729f522a75424c219e9ecb - https://source.android.com/security/bulletin/2025-05-01
CVE ID: CVE-2025-26443 State: PUBLISHED Published: 2025-09-04T17:14:55.668Z Last Updated: 2025-09-06T03:55:48.704Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from unknown sources due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/69a363847696f6f79f81038cad03c7950bc82054 - https
//android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/69a363847696f6f79f81038cad03c7950bc82054 - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26444 State: PUBLISHED Published: 2025-09-04T17:12:00.227Z Last Updated: 2025-09-06T03:55:47.223Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly revert to the default assistant application when a user-selected assistant is forcibly stopped due to a logic error in the code. This could lead to local escalation of privilege where the default assistant app is automatically granted ROLE_ASSISTANT with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA A
itional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/c439c7e75e73056e6201fa4f4fe340e715196182 - https://source.android.com/security/bulletin/2025-05-01
CVE ID: CVE-2025-26445 State: PUBLISHED Published: 2025-09-04T17:14:56.675Z Last Updated: 2025-09-05T17:15:17.422Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Connectivity/+/0eccf35b6b1b123996ee41e4cc078cf79c35be89 - https://source.android.com/security/bulletin/2025-
ges/modules/Connectivity/+/0eccf35b6b1b123996ee41e4cc078cf79c35be89 - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26448 State: PUBLISHED Published: 2025-09-04T17:14:57.681Z Last Updated: 2025-09-05T17:15:49.551Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/3c1515f4d1942f2453554315a576ed874703f78b - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26449 State: PUBLISHED Published: 2025-09-04T17:14:58.696Z Last Updated: 2025-09-05T17:16:07.539Z Vendors: Google Products: Android Problem Types: Denial of service Description: In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/e3c4ba3c7963138cb4c189fbec829c08ab27fa08 - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26450 State: PUBLISHED Published: 2025-09-04T17:14:59.689Z Last Updated: 2025-09-06T03:55:49.502Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/f48bf9a2e7c728d7010f8c9ad047fa76a869d3d4 - htt
References: - https://android.googlesource.com/platform/frameworks/base/+/f48bf9a2e7c728d7010f8c9ad047fa76a869d3d4 - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26452 State: PUBLISHED Published: 2025-09-04T17:15:00.710Z Last Updated: 2025-09-06T03:55:50.288Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/37a272435a238d8ca312b3ffeacac7dc348905e7 - https://source.android.com/security/bulletin/2025
/platform/frameworks/base/+/37a272435a238d8ca312b3ffeacac7dc348905e7 - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26453 State: PUBLISHED Published: 2025-09-04T17:15:01.776Z Last Updated: 2025-09-05T21:02:37.428Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/495d32429fd801c6cd7fe5e568b9c805f47fb4ed - https://source.android.com/security/bul
platform/packages/modules/Bluetooth/+/495d32429fd801c6cd7fe5e568b9c805f47fb4ed - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26454 State: PUBLISHED Published: 2025-09-04T18:33:47.465Z Last Updated: 2025-09-06T03:55:56.361Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another user due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/d33d045407c5bd0000442667d9ef5c9fc3f590e5 - https://android.goo
lesource.com/platform/packages/apps/ManagedProvisioning/+/d33d045407c5bd0000442667d9ef5c9fc3f590e5 - https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/03cadb65c0b6a91a480041aa9129e9dbf995279b - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-26455 State: PUBLISHED Published: 2025-09-04T17:15:02.803Z Last Updated: 2025-09-06T03:55:51.079Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/e28ca0c3d70c67cda2a09dc2d663a3395b13c779 - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26456 State: PUBLISHED Published: 2025-09-04T17:15:03.841Z Last Updated: 2025-09-06T03:55:51.837Z Vendors: Google Products: Android Problem Types: Denial of service Description: In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/art/+/1aedae6e1049aa794b3554183bf07634c8fa291b - https://android.googlesource.com/platform/art/+/3c76194d116bad95e11b
rm/art/+/1aedae6e1049aa794b3554183bf07634c8fa291b - https://android.googlesource.com/platform/art/+/3c76194d116bad95e11bda345feaedda6c02c8b4 - https://android.googlesource.com/platform/art/+/06a99377e368b688dbeb4e6bb11b6e1dfca8bb70 - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26458 State: PUBLISHED Published: 2025-09-04T17:15:04.973Z Last Updated: 2025-09-05T21:01:44.842Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/9d2acb2d3c5dae5ace5add3e1d0c0e3ab5cfb900 - https://source.android.com/security/bulletin/2025-
platform/frameworks/base/+/9d2acb2d3c5dae5ace5add3e1d0c0e3ab5cfb900 - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26461 State: PUBLISHED Published: 2025-09-05T16:10:03.595Z Last Updated: 2025-09-05T17:03:52.638Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/android-16
CVE ID: CVE-2025-26462 State: PUBLISHED Published: 2025-09-04T17:15:06.107Z Last Updated: 2025-09-06T03:55:52.557Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/7076b2b2bd3cceea45f5d3dfa5ee279da819c9e1 - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26463 State: PUBLISHED Published: 2025-09-04T17:15:07.161Z Last Updated: 2025-09-05T15:13:58.416Z Vendors: Google Products: Android Problem Types: Denial of service Description: In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/4b630be2e2b30ff3c57128c660bfef6514193d25 - https://source.android.com/security/bulletin/2025-06-01
CVE ID: CVE-2025-26464 State: PUBLISHED Published: 2025-09-04T18:33:48.471Z Last Updated: 2025-09-06T03:55:57.101Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/AppSearch/+/e272ad00529243f766c6ebd4e976549bd4fff4fb - https://source.android.com/security/bul
platform/packages/modules/AppSearch/+/e272ad00529243f766c6ebd4e976549bd4fff4fb - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-26465 State: PUBLISHED Published: 2025-02-18T18:27:16.843Z Last Updated: 2025-11-06T23:33:09.945Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Discovery 1.14, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat OpenShift Container Platform 4 Problem Types: CWE-390 Description: A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This iss
s enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:16823 - https://access.redhat.com/errata/RHSA-2025:3837 - https://access.redhat.com/errata/RHSA-2025:6993 - https://access.redhat.com/errata/RHSA-2025:8385 - https://access.redhat.com/secu
cess.redhat.com/errata/RHSA-2025:6993 - https://access.redhat.com/errata/RHSA-2025:8385 - https://access.redhat.com/security/cve/CVE-2025-26465 - https://access.redhat.com/solutions/7109879 - https://bugzilla.redhat.com/show_bug.cgi?id=2344780 - https://seclists.org/oss-sec/2025/q1/144
CVE ID: CVE-2025-26466 State: PUBLISHED Published: 2025-02-28T21:25:28.861Z Last Updated: 2025-11-06T23:33:10.047Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-770 Description: A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sendin
queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-26466 - https://bugzilla.redhat.com/show_bug.cgi?id=2345043 - https://seclists.org/oss-sec/2025/q1/144 - https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt
CVE ID: CVE-2025-26467 State: PUBLISHED Published: 2025-08-25T14:06:28.761Z Last Updated: 2025-08-26T03:55:26.020Z Vendors: Apache Software Foundation Products: Apache Cassandra Problem Types: CWE-267 Description: Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on affected versions should review data access rules for potential breaches. This issue affects Apache Cassandra 3.0.30, 3.11.17, 4.0.16, 4.1.7, 5.0.2, but this advisory is only for 4.0.16 bec
hes. This issue affects Apache Cassandra 3.0.30, 3.11.17, 4.0.16, 4.1.7, 5.0.2, but this advisory is only for 4.0.16 because the fix to CVE-2025-23015 was incorrectly applied to 4.0.16, so that version is still affected. Users in the 4.0 series are recommended to upgrade to version 4.0.17 which fixes the issue. Users from 3.0, 3.11, 4.1 and 5.0 series should follow recommendation from CVE-2025-23015. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/xxj36rr4d6mzyqpld05dn8b9951hfpz7
CVE ID: CVE-2025-26468 State: PUBLISHED Published: 2025-06-09T22:07:44.510Z Last Updated: 2025-06-10T15:25:47.893Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CyberData Products: 011209 SIP Emergency Intercom Problem Types: CWE-306 Description: CyberData 011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01
CVE ID: CVE-2025-26469 State: PUBLISHED Published: 2025-07-28T13:36:21.156Z Last Updated: 2025-11-03T19:45:27.179Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: MedDream Products: MedDream PACS Premium Problem Types: CWE-732 Description: An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840. A specially crafted application can decrypt credentials stored in a configuration-related registry key. An attacker can execute a malicious script or application to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Reference
ion to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2154
CVE ID: CVE-2025-26470 State: PUBLISHED Published: 2025-08-12T16:59:20.543Z Last Updated: 2025-08-15T03:55:52.322Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Distribution for Python software installers Problem Types: Escalation of Privilege, CWE-276 Description: Incorrect default permissions for some Intel(R) Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01345.html
CVE ID: CVE-2025-26472 State: PUBLISHED Published: 2025-08-12T16:59:22.020Z Last Updated: 2025-08-13T20:15:48.054Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Edge Orchestrator software Problem Types: Denial of Service, CWE-400 Description: Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
CVE ID: CVE-2025-26473 State: PUBLISHED Published: 2025-02-13T21:17:46.586Z Last Updated: 2025-02-14T15:47:58.188Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Outback Power Products: Mojave Inverter Problem Types: CWE-598 Description: The Mojave Inverter uses the GET method for sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17 - https://old.outbackpower.com/about-outback/contact/contact-us
CVE ID: CVE-2025-26475 State: PUBLISHED Published: 2025-03-19T15:13:52.249Z Last Updated: 2025-03-19T15:35:15.712Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Dell Products: Secure Connect Gateway (SCG) 5.0 Appliance - SRS Problem Types: CWE-287 Description: Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, Enables Live-Restore setting which enhances security by keeping containers running during daemon restarts, reducing attack exposure, preventing accidental misconfigurations, and ensuring security controls remain active. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-uk/00029
active. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-uk/000291028/dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities