Vulnerabilities & Exploits Archives - Page 3 of 106

Google Releases Chrome 111 Update With Fixes For 7 High Risk Vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 21, 2023 / browser, Chrome, Chrome 111, Google

Google has released Chrome 111.0.5563.110 for Mac and Linux and Chrome 111.0.5563.110/.111 for Windows with fixes for seven High severity vulnerabilities.

Google Releases Chrome 111 Update With Fixes For 7 High Risk Vulnerabilities Read More »

Microsoft March 2023 Security Updates Fixes 101 Vulnerabilities (9 Critical, 2 zero-days)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / March 14, 2023 / CVE-2023-21708, CVE-2023-23392, CVE-2023-23397, CVE-2023-23404, CVE-2023-23411, CVE-2023-23415, CVE-2023-23416, CVE-2023-24880, ICMP, Outlook, RCE, SmartScreen, Windows

The Microsoft March 2023 Security Updates includes patches and advisories for 101 vulnerabilities, including 9 Critical severity issues and two zero-days exploited in the wild.

Microsoft March 2023 Security Updates Fixes 101 Vulnerabilities (9 Critical, 2 zero-days) Read More »

Adobe Security Updates For Multiple Products (one Zero day)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / March 14, 2023 / Adobe, ColdFusion, Commerce, Creative Cloud, CVE-2023-26360, Dimension, Experience Manager, Illustrator, Photoshop, Substance 3D Stager

Adobe has released eight advisories addressing multiple vulnerabilities in Adobe Commerce, Experience Manager, Illustrator, Dimension, Creative Cloud, Substance 3D Stager, Photoshop, and ColdFusion products.

Adobe Security Updates For Multiple Products (one Zero day) Read More »

Threat actors launch zero-day attack against Python Package Index (PyPI) packages

Application Security, Source Code Security, Vulnerabilities & Exploits, Zero-days / Frank Crast / February 24, 2023 / FortiGuard, Open Source, PyPI, Python

Researchers have discovered threat actors launching zero-day attack against packages in the Python Package Index (PyPI) repository.

Threat actors launch zero-day attack against Python Package Index (PyPI) packages Read More »

CISA Adds IBM and Mitel Vulnerabilities To Known Exploited Vulnerabilities Catalog

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / February 22, 2023 / Aspera, CVE-2022-40765, CVE-2022-41223, CVE-2022-47986, Faspex, IBM, Mitel, MiVoice

The Cybersecurity and Infrastructure Security Agency (CISA) has added IBM and Mitel vulnerabilities to its Known Exploited Vulnerabilities Catalog.

CISA Adds IBM and Mitel Vulnerabilities To Known Exploited Vulnerabilities Catalog Read More »

Attackers Exploit Forta GoAnywhere Zero-day Vulnerability

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / February 17, 2023 / CVE-2023-0669, Forta, GoAnywhere, Zero-day

Attackers have been exploiting a Forta GoAnywhere zero-day vulnerability (CVE-2023-0669).

Attackers Exploit Forta GoAnywhere Zero-day Vulnerability Read More »

Microsoft February 2023 Security Updates addresses 79 vulnerabilities (9 rated Critical, 3 zero days)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / February 16, 2023 / CVE-2023-21715, CVE-2023-21823, CVE-2023-23376, PEAP, RCE

The Microsoft February 2023 Security Updates includes patches and advisories for 79 vulnerabilities, including 9 Critical severity remote code execution issues and three zero-days exploited in the wild.

Microsoft February 2023 Security Updates addresses 79 vulnerabilities (9 rated Critical, 3 zero days) Read More »

Apple Fixes Exploited Zero-Day Vulnerability (CVE-2023-23529) in IOS, Safari and macOS

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / February 14, 2023 / Apple, CVE-2023-23529, iOS1631, macOS, Safari, Ventura, Webkit

Apple has released an emergency security update that fixes a zero-day exploited vulnerability (CVE-2023-23529) in iOS, Safari, and macOS, under attack in the wild.

Apple Fixes Exploited Zero-Day Vulnerability (CVE-2023-23529) in IOS, Safari and macOS Read More »

CISA Adds Intel, Oracle and 3 other Vulnerabilities To Known Exploited Vulnerabilities Catalog

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / February 10, 2023 / CVE-2022-21587, Forta, Intel, Oracle, SugarCRM, TerraMaster

The Cybersecurity and Infrastructure Security Agency (CISA) has added Intel, Oracle, TerraMaster, Forta, and SugarCRM vulnerabilities to its Known Exploited Vulnerabilities Catalog.

CISA Adds Intel, Oracle and 3 other Vulnerabilities To Known Exploited Vulnerabilities Catalog Read More »

OpenSSL patches multiple vulnerabilities (1 rated High severity)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / February 10, 2023 / CVE-2023-0286, OpenSSL, Vulnerabilities, X.509

OpenSSL has released a security update with fixes for one High risk vulnerability (CVE-2023-0286) and multiple other Moderate severity vulnerabilities.

OpenSSL patches multiple vulnerabilities (1 rated High severity) Read More »