Vulnerabilities Archives - Page 2 of 12

Apple fixes zero-day vulnerability (CVE-2022-32893) in iOS 12.5.6 exploited in the wild

Mobile Security, Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / September 2, 2022 / Apple, CVE-2022-32893, Exploit, iOS, Vulnerabilities, Webkit, Zero-day

Apple has fixed a zero-day vulnerability (CVE-2022-32893) in iOS 12.5.6 under attack in the wild.

Apple fixes zero-day vulnerability (CVE-2022-32893) in iOS 12.5.6 exploited in the wild Read More »

Google releases Chrome 104 security update with fixes for 11 vulnerabilities (1 zero-day CVE-2022-2856)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / August 19, 2022 / Chrome, CVE-2022-2856, Vulnerabilities, Zero-day

Google has released Chrome 104.0.5112.101 (Mac/Linux) and 104.0.5112.102/101 (Windows), with fixes for 11 vulnerabilities (one rated Critical and seven rated High severity). Additionally, one of the patches fixed a zero-day flaw CVE-2022-2856.

Google releases Chrome 104 security update with fixes for 11 vulnerabilities (1 zero-day CVE-2022-2856) Read More »

Adobe security updates for Acrobat and Reader, Illustrator and other products

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / August 11, 2022 / Acrobat, Adobe, Commerce, Framemaker, Illustrator, PremiereElements, Vulnerabilities

Adobe has released security updates for Acrobat and Reader, Illustrator, FrameMaker, Premiere Elements, and Adobe Commerce.

Adobe security updates for Acrobat and Reader, Illustrator and other products Read More »

CISA adds Critical Microsoft diagnostics tool vulnerability to Catalog of exploited vulnerabilities

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / June 16, 2022 / CVE-2022-30190, Cybersecurity Threat Center, exploits, Follina, Microsoft, MSDT, RCE, Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has added one Microsoft Support Diagnostic Tool (MSDT) vulnerability CVE-2022-30190 (aka “Follina”) to its Known Exploited Vulnerabilities Catalog.

CISA adds Critical Microsoft diagnostics tool vulnerability to Catalog of exploited vulnerabilities Read More »

Microsoft June 2022 Security Updates addresses 55 vulnerabilities (3 Critical)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / June 14, 2022 / CVE-2022-30136, CVE-2022-30139, CVE-2022-30163, Cybersecurity Threat Center, HyperV, LDAP, Microsoft, NFS, RCE, Vulnerabilities

The Microsoft June 2022 Security Updates includes patches and advisories for 55 vulnerabilities, three of those rated Critical severity.

Microsoft June 2022 Security Updates addresses 55 vulnerabilities (3 Critical) Read More »

Google releases Chrome 102 (102.0.5005.115) security updates with fixes for 4 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / June 11, 2022 / Android, browser, Chrome, Chrome 102, Cybersecurity, Cybersecurity Threat Center, Infosec, Vulnerabilities

eleased Chrome version 102.0.5005.115 for Windows, Mac and Linux, with fixes for seven vulnerabilities (four rated High severity).

Google releases Chrome 102 (102.0.5005.115) security updates with fixes for 4 High severity vulnerabilities Read More »

CISA adds 75 vulnerabilities to Known Exploited Vulnerabilities Catalog

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 28, 2022 / CISA, CVE-2022-20821, Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has added more than 75 vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Cisco, Microsoft, Adobe, Oracle, Linux vulnerabilities and more.

CISA adds 75 vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »

Google releases Chrome OS security updates

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 8, 2022 / Chrome OS, Vulnerabilities

Google has released Chrome OS 99.0.4844.57 security update for Chrome OS devices to fix six vulnerabilities, three rated High severity.

Google releases Chrome OS security updates Read More »

Microsoft releases emergency patches for Exchange Server RCE vulnerabilities exploited in the wild (Updated)

Cybersecurity Attacks, Messaging Security, Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / March 8, 2021 / CVE-2021-26855, Cybersecurity, Cybersecurity Threat Center, Exchange, Exchange Server, Exploit, Microsoft, Vulnerabilities

Microsoft has released emergency out-of-band security updates to fix multiple Critical vulnerabilities impacting Microsoft Exchange Server 2013, 2016 and 2019, collectively known as “ProxyLogon.” The tech giant also published interim mitigations if organizations can not patch immediately, as well as an IOC detection tool.

Microsoft releases emergency patches for Exchange Server RCE vulnerabilities exploited in the wild (Updated) Read More »

Qualys impacted by Accellion FTA zero-day vulnerability

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 4, 2021 / Accellion, CVE-2021-27101, FTA, Qualys, UNC25346, Vulnerabilities, Zero-day

Cybersecurity firm Qualys announced a “limited” number of their customers had been impacted by a data breach caused by an exploited Accellion FTA zero-day vulnerability on Qualys customer support systems.

Qualys impacted by Accellion FTA zero-day vulnerability Read More »