Security Updates & Patches Archives - Page 5 of 89

Google releases Chrome 108 update with fixes for 4 High risk vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 19, 2022 / Chrome, Chrome108, ChromeOS, CVE-2022-4436, CVE-2022-4437, CVE-2022-4438, CVE-2022-4439, LTS-102

Google has released Chrome 108.0.5359.124 for Mac and Linux and 108.0.5359.124/.125 for Windows with a fixes for four High severity vulnerabilities. New security updates for ChromeOS, Chrome for Android, and Chrome for iOS were also published.

Google releases Chrome 108 update with fixes for 4 High risk vulnerabilities Read More »

CISA adds 6 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include iOS, Microsoft, Fortinet, Citrix and Veeam vulnerabilities)

Cybersecurity Attacks, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 18, 2022 / Citrix, CVE-2022-26500, CVE-2022-26501, CVE-2022-27518, CVE-2022-42475, CVE-2022-42856, CVE-2022-44698, Defender, Fortinet, iOS, Microsoft, SmartScreen, VPN

The Cybersecurity and Infrastructure Security Agency (CISA) has added six vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include iOS, Microsoft, Fortinet, Citrix and Veeam vulnerabilities.

CISA adds 6 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include iOS, Microsoft, Fortinet, Citrix and Veeam vulnerabilities) Read More »

Samba fixes NetLogon and Kerberos vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 18, 2022 / CVE-2022-37966, CVE-2022-37967, CVE-2022-38023, CVE-2022-45141, Kerberos, Netlogon, Samba

Samba has released software updates to fix four vulnerabilities in multiple Samba software products. Two of the issues are related to Kerberos Elevation of Privilege vulnerabilities and another a NetLogon flaw that Microsoft patched in November.

Samba fixes NetLogon and Kerberos vulnerabilities Read More »

Drupal fixes 2 Moderately Critical vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 18, 2022 / Drupal, H5P

Drupal has patched two Moderately Critical vulnerabilities that affect multiple versions of Drupal Core.

Drupal fixes 2 Moderately Critical vulnerabilities Read More »

Apple patches vulnerabilities in iOS 16.2, macOS Ventura 13.1 and other products

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 18, 2022 / iOS, iOS162, macOS, Ventura

Apple has released security updates for Apple iOS 16.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, Safari 16.2, and other products.

Apple patches vulnerabilities in iOS 16.2, macOS Ventura 13.1 and other products Read More »

Microsoft December 2022 Security Updates addresses 53 vulnerabilities (7 Critical, 1 exploited in the wild)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / December 17, 2022 / CVE-2022-41076, CVE-2022-41089, CVE-2022-41127, CVE-2022-44670, CVE-2022-44676, CVE-2022-44690, CVE-2022-44693, CVE-2022-44698, MOTW, PowerSHell, SmartScreen

The Microsoft December 2022 Security Updates includes patches and advisories for 53 vulnerabilities, including seven Critical severity issues and one exploited in the wild.

Microsoft December 2022 Security Updates addresses 53 vulnerabilities (7 Critical, 1 exploited in the wild) Read More »

Android Security Bulletin December 2022 fixes 80 vulnerabilities (4 Critical)

Mobile Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 7, 2022 / Android, CVE-2022-20411, CVE-2022-20472, CVE-2022-20473, CVE-2022-20498

Google has released its Android Security Bulletin for December 2022 with details of security vulnerabilities (four rated Critical severity) affecting Android devices.

Android Security Bulletin December 2022 fixes 80 vulnerabilities (4 Critical) Read More »

Google fixes Chrome 108 zero-day vulnerability (CVE-2022-4262) exploited in the wild

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / December 4, 2022 / Chrome, CVE-2022-4262, Zero-day

Google has released Chrome 108.0.5359.94 for Mac and Linux and 108.0.5359.94/.95 for Windows with a fix for a High severity zero-day vulnerability (CVE-2022-4262) exploited in the wild.

Google fixes Chrome 108 zero-day vulnerability (CVE-2022-4262) exploited in the wild Read More »

Mozilla releases Firefox 107 with fixes for 8 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 20, 2022 / CVE-2022-45403, CVE-2022-45404, CVE-2022-45405, CVE-2022-45406, CVE-2022-45407, CVE-2022-45408, CVE-2022-45409, CVE-2022-45421, Firefox 107, Mozilla

The Mozilla Foundation has patched eight High risk vulnerabilities in Firefox 107, as well as a number of other bug fixes.

Mozilla releases Firefox 107 with fixes for 8 High severity vulnerabilities Read More »

ProxyNotShell POC exploit code released

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 20, 2022 / CVE-2021-34473, CVE-2022-41040, CVE-2022-41082, Exploit, POC, ProxyNotShell, ProxyShell

A security researcher has released proof-of-concept (PoC) exploit code for Microsoft Exchange ProxyNotShell vulnerabilities (CVE-2022-41040 and CVE-2022-41082).

ProxyNotShell POC exploit code released Read More »