Alerts

SonicWall has released a security update to fix a vulnerability affecting SonicWall SMA 100 series appliances. The addressed vulnerability could allow the local attacker to bypass authorization mechanisms and gain elevated privileges. SonicWall SMA 100 Local Privilege Escalation Vulnerability (CVE-2025-40602): CVSS: 6.6 Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Consequences: […]

Microsoft has released an updated version of Microsoft Edge in the stable channel, “143.0.3650.80” to address multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, perform spoofing attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, or gain access to the affected systems. Sample of the addressed vulnerabilities: Microsoft Edge

Google has released an updated Chrome version 143.0.7499.109/.110 for Windows and Mac, and version 143.0.7499.109 for Linux. The addressed vulnerabilities could allow the attacker to bypass security restrictions or execute arbitrary code and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: Google

Mozilla has released an updated Firefox version 146, Firefox ESR versions 115.31, and 140.6 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, corrupt memory, and gain access to the affected system by persuading the victim to visit a specially crafted website. Sample of the addressed

Zoom has released a security update to fix multiple vulnerabilities in Zoom Rooms for Windows and macOS. The addressed vulnerabilities could allow the attacker to gain elevated privileges or obtain sensitive information on the affected systems. The addressed vulnerabilities: 1. Zoom Rooms for Windows – Software Downgrade Protection Mechanism Failure (CVE-2025-67460): CVSS: 7.8 Attack Vector:

Microsoft has released its monthly patch of security updates, known as Patch Tuesday. The mentioned patch addressed one actively exploited and two publicly disclosed zero-day vulnerabilities. Microsoft has fixed (57) vulnerabilities that could allow the attacker to gain elevated privileges, perform denial of service attacks, obtain sensitive information, or execute arbitrary code and gain access

Apache has released security updates to address multiple vulnerabilities affecting Apache HTTP Server versions before 2.4.66. The addressed vulnerabilities could allow the attacker to perform denial-ofservice attacks, bypass security restrictions, obtain sensitive information, manipulate sensitive data, or execute code and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Apache HTTP Server:

Splunk has released security updates to fix several vulnerabilities across multiple Splunk products. The addressed vulnerabilities could allow the attacker to cause unvalidated redirects to malicious sites, conduct denial of service attacks, perform cross-site scripting attacks, gain elevated privileges, bypass security restrictions, and obtain sensitive information from the affected products. Sample of the addressed vulnerabilities:

Google has released an updated Chrome version “143.0.7499.40/41” for Windows, Mac, and “143.0.7499.40” for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, perform spoofing attacks, exploit heap corruption via a crafted HTML page, bypass security restrictions, obtain sensitive information, gain elevated privileges, or gain access to the affected systems. Sample of

HPE Aruba Networking has released security updates to address  several vulnerabilities across multiple Aruba products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, perform denial-of-service attacks, conduct command injection attacks, hijack user sessions, or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities: 1. Aruba AOS-CX Network Management Interface

SonicWall has released security updates to fix several vulnerabilities affecting multiple SonicWall products. The addressed vulnerabilities could allow the remote unauthenticated attacker to cause denial of service attacks, view partial users’ credential data, modify system files, gain persistent arbitrary code execution, manipulate file system paths, and cause service disruption on the affected product. Sample of

Fortinet has released security updates to fix several vulnerabilities across multiple Fortinet products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code or commands, and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. FortiVoice SQL Injections in Voice and

Google has released an updated Chrome version 142.0.7444.175/.176 for Windows, 142.0.7444.176 for Mac, and 142.0.7444.175 for Linux. The addressed vulnerabilities could allow the remote attacker to exploit heap corruption via a crafted HTML page and gain access to the affected system. Sample of the addressed vulnerabilities: Google Chrome Type Confusion in V8 Vulnerability (CVE-2025-13223): CVSS:

Cisco has released security updates to fix several vulnerabilities affecting Cisco Catalyst Center, both virtual and hardware appliances. The addressed vulnerabilities could allow the attacker to conduct cross-site scripting attacks, perform phishing attacks, gain elevated privileges, or execute arbitrary commands in a restricted container with root privileges, and gain access to the affected product. Sample