Critical InputPlumber Flaw Enables UI Input Injection and Denial-of-Service

Security researchers have discovered critical vulnerabilities in InputPlumber, a Linux input device utility used in SteamOS, that could allow attackers to inject keystrokes, leak sensitive information, and cause denial-of-service conditions. The flaws, tracked as CVE-2025-66005 and CVE-2025-14338, affect InputPlumber versions before v0.69.0 and stem from inadequate D-Bus authorization checks. CVE ID Description Affected Versions Impact […]

The post Critical InputPlumber Flaw Enables UI Input Injection and Denial-of-Service appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.