Security Updates & Patches Archives - Page 16 of 89

Microsoft April 2022 Security Updates addresses 117 vulnerabilities (to include 2 zero-days)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / April 12, 2022 / CVE-2022-22008, CVE-2022-23257, CVE-2022-23259, CVE-2022-24491, CVE-2022-24497, CVE-2022-24500, CVE-2022-24521, CVE-2022-24537, CVE-2022-24541, CVE-2022-26809, CVE-2022-26904, CVE-2022-26919, Zero-day

The Microsoft April 2022 Security Updates includes patches and advisories for 117 vulnerabilities, ten of those rated Critical and two zero-day flaws.

Microsoft April 2022 Security Updates addresses 117 vulnerabilities (to include 2 zero-days) Read More »

Google releases Chrome 100 security update (100.0.4896.88) with fixes for 11 vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 12, 2022 / Chrome, Chrome 100, CVE-2022-1305, CVE-2022-1306, CVE-2022-1307, CVE-2022-1308, CVE-2022-1309, CVE-2022-1310, CVE-2022-1311, CVE-2022-1312

Google has released Chrome 100.0.4896.88 for Windows, Mac and Linux with fixes for 11 vulnerabilities, 8 rated High severity.

Google releases Chrome 100 security update (100.0.4896.88) with fixes for 11 vulnerabilities Read More »

CISA adds 3 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include Sudo, SMBv1 vulnerabilities)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 7, 2022 / CVE-2017-0148, CVE-2021-31166, CVE-2021-3156, SMBv1, sudo

The Cybersecurity and Infrastructure Security Agency (CISA) has added 3 vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Sudo, SMBv1 and Microsoft HTTP Protocol Stack vulnerabilities.

CISA adds 3 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include Sudo, SMBv1 vulnerabilities) Read More »

Mozilla releases Firefox 99 with fixes for 3 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 7, 2022 / CVE-2022-1097, CVE-2022-28281, CVE-2022-28289, Firefox, Firefox99, Mozilla

The Mozilla Foundation has patched three High risk vulnerabilities in Firefox 99, as well as a number of other bug fixes.

Mozilla releases Firefox 99 with fixes for 3 High severity vulnerabilities Read More »

Google releases Chrome 100 security update (100.0.4896.75) with fix for 1 High risk vulnerability

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 7, 2022 / Android, Chrome, Chrome100, CVE-2022-1232, LTS-96

Google has released Chrome 100.0.4896.75 for Windows, Mac and Linux with fixes for just one High risk vulnerability. In addition, Google also issued security updates for Chrome for iOS, Chrome for Android and LTS-96.

Google releases Chrome 100 security update (100.0.4896.75) with fix for 1 High risk vulnerability Read More »

GitLab issues security update for Critical hard-coded password vulnerability (CVE-2022-1162)

Application Security, Password Management, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 2, 2022 / CVE-2022-1162, GitLab, LDAP, Oauth, OmniAuth, passwords

GitLab has issued a security update to address a Critical vulnerability CVE-2022-1162 where static passwords were inadvertently set during OmniAuth-based registration.

GitLab issues security update for Critical hard-coded password vulnerability (CVE-2022-1162) Read More »

CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include Trend Micro, Sophos, Dell, QNAP)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 2, 2022 / CVE-2018-10561, CVE-2018-10562, CVE-2021-21551, CVE-2021-28799, CVE-2021-34484, CVE-2022-1040, CVE-2022-26871, Dasan, Dell, QNAP, Sophos, Trend Micro, Windows

The Cybersecurity and Infrastructure Security Agency (CISA) has added 7 vulnerabilities to its Known Exploited Vulnerabilities Catalog. Recent additions include vulnerabilities affecting Trend Micro, Sophos, Windows, QNAP, Dell, and Dasan products.

CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include Trend Micro, Sophos, Dell, QNAP) Read More »

Spring fixes Critical Spring Framework “Spring4Shell” and Spring Cloud Function vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 1, 2022 / CVE-2022-22963, CVE-2022-22965, Spring, Spring4Shell

Spring has published new security fixes for Spring Framework “Spring4Shell” and Spring Cloud Function vulnerabilities.

Spring fixes Critical Spring Framework “Spring4Shell” and Spring Cloud Function vulnerabilities Read More »

Apple fixes zero-day vulnerabilities in iOS 15.4.1 and macOS Monterey 12.3.1 (with active exploits in the wild)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / April 1, 2022 / CVE-2022-22675, CVE-2022-22676, iOS, iOS154, macOS, Monterey

Apple has released security updates for Apple iOS 15.4.1, iPadOS 15.4.1 and macOS Monterey 12.3.1 products. Apple is aware of known exploits in the wild for a zero-day vulnerabilities CVE-2022-22675 and CVE-2022-22674.

Apple fixes zero-day vulnerabilities in iOS 15.4.1 and macOS Monterey 12.3.1 (with active exploits in the wild) Read More »

Google releases Chrome 100 security update (100.0.4896.60) with fixes for 9 High risk vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 30, 2022 / Chrome, Chrome 100, CVE-2022-1125, CVE-2022-1127, CVE-2022-1128, CVE-2022-1129, CVE-2022-1130, CVE-2022-1131, CVE-2022-1132, CVE-2022-1133, CVE-2022-1134

Google has released Chrome 100.0.4896.60 for Windows, Mac and Linux with fixes for multiple High risk vulnerabilities. In addition, Google also issued security updates for Chrome for iOS, Chrome for Android and Chrome OS.

Google releases Chrome 100 security update (100.0.4896.60) with fixes for 9 High risk vulnerabilities Read More »