Vulnerabilities & Exploits Archives - Page 5 of 106

Google releases Chrome OS security updates with fixes for 5 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / January 9, 2023 / Chrome, CVE-2022-41674, CVE-2022-42719, CVE-2022-42720, CVE-2022-4436, CVE-2022-4437, LTS, Vulnerabilities

Google has released Long Term Support (LTS) 102 security update and Stable Channel update for Chrome OS devices to fix multiple vulnerabilities.

Google releases Chrome OS security updates with fixes for 5 High severity vulnerabilities Read More »

Fortinet releases security update for High severity FortiADC vulnerability (CVE-2022-39947)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / January 4, 2023 / AV, CVE-2022-39947, DDoS, FortiADC, Fortinet, WAF

Fortinet has released a security advisory that addresses a Critical ‘command injection in web interface’
vulnerability (CVE-2022-39947) in multiple versions of FortiADC.

Fortinet releases security update for High severity FortiADC vulnerability (CVE-2022-39947) Read More »

CISA adds 2 TIBCO vulnerabilities to Known Exploited Vulnerabilities Catalog

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 29, 2022 / CISA, CVE-2018-18809, CVE-2018-5430, Exploit, TIBCO

The Cybersecurity and Infrastructure Security Agency (CISA) has added two TIBCO vulnerabilities to its Known Exploited Vulnerabilities Catalog.

CISA adds 2 TIBCO vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »

Linux Kernel ksmbd Use-After-Free RCE Vulnerability

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 28, 2022 / kernel, Linux, RCE, SMB3, ZDI

Security researchers have discovered a Critical remote code execution (RCE) vulnerability in Linux 5.15 Kernel Server Message Block (SMB) server, ksmbd.

Linux Kernel ksmbd Use-After-Free RCE Vulnerability Read More »

‘Achilles’ vulnerability exploit bypasses macOS Gatekeeper

Proof of Concepts (POCs), Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 20, 2022 / Apple, CVE-2022-42821, Gatekeeper, macOS, Microsoft, POC

Microsoft researchers discovered a vulnerability dubbed “Achilles” in macOS that could allow attackers to bypass Apple’s Gatekeeper security feature designed to ensure that only trusted software runs on your Mac.

‘Achilles’ vulnerability exploit bypasses macOS Gatekeeper Read More »

Google releases Chrome 108 update with fixes for 4 High risk vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 19, 2022 / Chrome, Chrome108, ChromeOS, CVE-2022-4436, CVE-2022-4437, CVE-2022-4438, CVE-2022-4439, LTS-102

Google has released Chrome 108.0.5359.124 for Mac and Linux and 108.0.5359.124/.125 for Windows with a fixes for four High severity vulnerabilities. New security updates for ChromeOS, Chrome for Android, and Chrome for iOS were also published.

Google releases Chrome 108 update with fixes for 4 High risk vulnerabilities Read More »

CISA adds 6 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include iOS, Microsoft, Fortinet, Citrix and Veeam vulnerabilities)

Cybersecurity Attacks, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 18, 2022 / Citrix, CVE-2022-26500, CVE-2022-26501, CVE-2022-27518, CVE-2022-42475, CVE-2022-42856, CVE-2022-44698, Defender, Fortinet, iOS, Microsoft, SmartScreen, VPN

The Cybersecurity and Infrastructure Security Agency (CISA) has added six vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include iOS, Microsoft, Fortinet, Citrix and Veeam vulnerabilities.

CISA adds 6 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include iOS, Microsoft, Fortinet, Citrix and Veeam vulnerabilities) Read More »

Samba fixes NetLogon and Kerberos vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 18, 2022 / CVE-2022-37966, CVE-2022-37967, CVE-2022-38023, CVE-2022-45141, Kerberos, Netlogon, Samba

Samba has released software updates to fix four vulnerabilities in multiple Samba software products. Two of the issues are related to Kerberos Elevation of Privilege vulnerabilities and another a NetLogon flaw that Microsoft patched in November.

Samba fixes NetLogon and Kerberos vulnerabilities Read More »