Vulnerabilities & Exploits

Securezoo Cybersecurity Threat Center blog posts of new vulnerabilities and exploits.

Adobe releases security updates for Adobe Acrobat and Reader, Adobe DNG SDK

Adobe has released security updates to address vulnerabilities in Adobe Acrobat and Reader, as well as Adobe DNG Software Development Kit (SDK). Successful exploitation could lead to arbitrary code execution or information disclosure.

Adobe releases security updates for Adobe Acrobat and Reader, Adobe DNG SDK Read More »

Microsoft May 2020 Security Updates (16 Critical vulnerabilities fixed)

Microsoft released the May 2020 Security Updates that includes 111 unique vulnerability fixes, 16 of those rated critical.

Microsoft May 2020 Security Updates (16 Critical vulnerabilities fixed) Read More »

SaltStack, multiple vendors fix Critical vulnerabilities in Salt

In case you missed it last week, SaltStack released security updates to fix two critical Salt vulnerabilities. Multiple vendors that integrate Salt into their products have also released patches or workarounds to address the flaws.

SaltStack, multiple vendors fix Critical vulnerabilities in Salt Read More »

Cisco releases 12 High severity advisories for multiple products

Cisco has released 12 High severity security advisories for Cisco Adaptive Security Appliance (ASA) Software and Firepower products. In addition, a security fix was also released to address a Snort HTTP detection engine file policy bypass Vulnerability.

Cisco releases 12 High severity advisories for multiple products Read More »

Mozilla releases Firefox 76 with new account password protections and security updates

The Mozilla Foundation has released Firefox 76 with new security protections for online account logins and passwords. The update also includes fixes for multiple vulnerabilities.

Mozilla releases Firefox 76 with new account password protections and security updates Read More »

Alert: Weblogic vulnerability exploited in the wild (apply April CPUs without delay)

Oracle released a new warning that a previously patched Weblogic vulnerability CVE-2020-2883 is being exploited in the wild. The company further urged organizations should apply April CPUs without delay.

Alert: Weblogic vulnerability exploited in the wild (apply April CPUs without delay) Read More »