Security Updates & Patches Archives - Page 14 of 89

Apache patches High risk Tomcat vulnerability (CVE-2022-25762)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 20, 2022 / Apache, CVE-2022-25762, Tomcat, WebSocket

The Apache Software Foundation has patched a High risk Apache Tomcat ‘Request Mix-up’ vulnerability CVE-2022-25762.

Apache patches High risk Tomcat vulnerability (CVE-2022-25762) Read More »

ISC fixes High risk BIND vulnerability (CVE-2022-1183)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 20, 2022 / BIND, CVE-2022-1183, ISC, TLS

The Internet Systems Consortium (ISC) has released a security update that fixes a High risk vulnerability CVE-2022-1183 in multiple versions of ISC Berkeley Internet Name Domain (BIND).

ISC fixes High risk BIND vulnerability (CVE-2022-1183) Read More »

Apple patches vulnerabilities in multiple products (CVE-2022-22675 exploited in the wild)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / May 20, 2022 / Apple, Apple iOS 15.5, CVE-2022-22675, iOS, iPadOS 15.5, macOS, macOS Big Sur 11.6.6, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6

Apple has released security updates for Apple iOS 15.5, macOS Monterey 12.4, macOS Big Sur 11.6.6, and other products. Apple is aware of known exploits in the wild for a zero-day vulnerability CVE-2022-22675 that affects macOS Big Sur, watchOS, and tvOS.

Apple patches vulnerabilities in multiple products (CVE-2022-22675 exploited in the wild) Read More »

Adobe has released security updates for multiple Adobe products

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 15, 2022 / Adobe, Animator, ColdFusion, Framemaker, InCopy, InDesign

Adobe has released security updates for Adobe Character Animator, ColdFusion, InDesign, Framemaker, and InCopy.

Adobe has released security updates for multiple Adobe products Read More »

Attackers could exploit Critical F5 BIG-IP vulnerability to execute arbitrary commands

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 15, 2022 / BIG-IP, CVE-2022-1388, iControl, REST

Unauthenticated attackers could exploit a Critical BIG-IP iControl REST vulnerability CVE-2022-1388 to execute arbitrary system commands, create or delete files, or disable services on BIG-IP systems.

Attackers could exploit Critical F5 BIG-IP vulnerability to execute arbitrary commands Read More »

Google releases Chrome 101 (101.0.4951.64) security update with fixes for 13 vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 11, 2022 / Chrome, Chrome101, CVE-2022-1633, CVE-2022-1634, CVE-2022-1635, CVE-2022-1636, CVE-2022-1637, CVE-2022-1638, CVE-2022-1639, CVE-2022-1640

Google has released Chrome 101.0.4951.64 for Windows, Mac and Linux with fixes for 13 vulnerabilities, to include 8 rated High severity.

Google releases Chrome 101 (101.0.4951.64) security update with fixes for 13 vulnerabilities Read More »

security, professional, secret-5199239.jpg

Microsoft May 2022 Security Updates addresses 73 vulnerabilities (7 rated Critical, 1 zero-day)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / May 11, 2022 / CVE-2022-21972, CVE-2022-22017, CVE-2022-23270, CVE-2022-26921, CVE-2022-26923, CVE-2022-26925, CVE-2022-26937, CVE-20220-29972, LSARPC, Microsoft, Windows

The Microsoft May 2022 Security Updates includes patches and advisories for 73 vulnerabilities, seven of those rated Critical severity and one zero-day flaw CVE-2022-26925.

Microsoft May 2022 Security Updates addresses 73 vulnerabilities (7 rated Critical, 1 zero-day) Read More »

Google releases security updates for ChromeOS and Chrome for Android

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 10, 2022 / Chrome, Chrome101, ChromeOS

Google has released security updates for ChromeOS 101.0.4951.59 and Chrome 101 (101.0.4951.61) for Android with fixes for multiple High risk vulnerabilities.

Google releases security updates for ChromeOS and Chrome for Android Read More »

Mozilla releases Firefox 100 with fixes for 6 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 9, 2022 / CVE-2022-29909, CVE-2022-29914, CVE-2022-29916, CVE-2022-29917, CVE-2022-29918, Firefox, Firefox100, Mozilla

The Mozilla Foundation has patched six High risk vulnerabilities in Firefox 100, as well as a number of other bug fixes.

Mozilla releases Firefox 100 with fixes for 6 High severity vulnerabilities Read More »

The Top 15 mostly commonly exploited vulnerabilities in 2021

Cybersecurity Attacks, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 2, 2022 / CVE-2018-13379, CVE-2019-11510, CVE-2020-0688, CVE-2020-1472, CVE-2021-21972, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, CVE-2021-31207, CVE-2021-34473, CVE-2021-34523, CVE-2021-40539, CVE-2021-44228, log4Shell, ProxyLogon, ProxyShell, Zerologon

The Cybersecurity Advisory (CSA) published details on the top 15 vulnerabilities most routinely exploited by malicious cyber actors in 2021. Common CVEs include Log4Shell, ProxyLogon, ProxyShell, ZeroLogon and others.

The Top 15 mostly commonly exploited vulnerabilities in 2021 Read More »