Alerts

Fortinet has released security updates to fix several vulnerabilities across multiple Fortinet products. The addressed vulnerabilities could allow the attacker to perform denial of service attacks, gain elevated privileges, obtain sensitive information, bypass security restrictions, conduct cross-site scripting attacks, conduct cross-site request forgery attacks, or execute arbitrary code and gain access to the affected product. […]

Zoom has released security updates to fix several vulnerabilities across multiple Zoom products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, or perform denial-of-service attacks on the affected systems. Sample of the addressed Vulnerabilities: 1. Zoom Apps Heap-based Buffer Overflow Vulnerability (CVE-2025-27440): CVSS: 8.5 Attack Vector: Network Attack Complexity:

Adobe has released security updates to address several vulnerabilities across multiple Adobe products. The addressed vulnerabilities could allow the attacker to expose sensitive data through memory leaks or execute arbitrary code and gain access to the affected product by persuading the victim to open a malicious file. Sample of the addressed vulnerabilities: 1. Adobe Acrobat

Microsoft has released its monthly patch of security updates, known as Patch Tuesday.  The mentioned patch addressed seven zero-day vulnerabilities. Microsoft has fixed (57) vulnerabilities as they could allow the attacker to gain elevated privileges, perform denial of service attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code and gain access to the

SAP has released security updates to address several vulnerabilities affecting multiple SAP products. SAP has released security updates to address vulnerabilities affecting SAP Commerce (Swagger UI), SAP Business One, SAP Business Warehouse, and SAP NetWeaver (ABAP Class Builder). The attacker could exploit some of theses vulnerabilities to perform cross-site scripting attacks or gain elevated privileges

Google has released an updated Chrome version 134.0.6998.88/.89 for Windows, Mac, and 134.0.6998.88 for Linux. The addressed vulnerabilities could allow the remote attacker to crash the browser, execute arbitrary code via a crafted HTML page, and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Google Chrome Remote Code Execution Vulnerability in

Microsoft has released an updated Microsoft Edge stable channel “134.0.3124.51” to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions, obtain sensitive information through a crafted HTML page, or execute arbitrary code and gain access to the affected system by persuading the victim to install malicious extensions. Sample of

Cisco has released security updatesto fix multiple vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to conduct cross-site scripting attacks, or execute arbitrary commands and gain access to the affected product by sending a crafted IPC message to a specific Cisco Secure Client process. The addressed vulnerabilities: 1. Cisco Secure Client

Google has released updated Chrome versions 134.0.6998.35/36 for Windows, 134.0.6998.44/45 for Mac, and 134.0.6998.35 for Linux. The addressed vulnerabilities could allow the remote attacker to crash the browser, execute arbitrary code, or obtain sensitive information via a crafted HTML page and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Google Chrome

Cisco has released security updates to fix several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to conduct cross-site scripting attacks, obtain sensitive information, perform denial of services attacks, bypass security restrictions, or execute arbitrary commands and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Cisco Nexus

Microsoft has released an updated Microsoft Edge stable channel (133.0.3065.82) to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to perform a denial of service attack or exploit heap corruption via a crafted HTML page and gain access to the affected system. Sample of the addressed vulnerabilities: Microsoft Edge (Chromium-based) Heap Buffer

OpenSSH released a security update to fix multiple vulnerabilities affecting OpenSSH version 9.9p1 and prior. The addressed vulnerabilities could allow the remote attacker to perform denial-of-service attacks or conduct man-in-the-middle attacks and obtain sensitive information from the affected systems. 1. OpenSSH Information Disclosure Vulnerability (CVE-2025-26465): CVSS: 6.8 Attack Vector: Network Attack Complexity: High Privileges Required:

Google has released an updated Chrome version 133.0.6943.126/.127 for Windows, Mac and 133.0.6943.126 for Linux. The addressed vulnerabilities could allow the remote attacker to perform a denial of service attack or exploit heap corruption via a crafted HTML page and gain access to the affected system. Sample of the addressed vulnerabilities: Google Chrome Heap Buffer

Citrix has released security updates to address multiple vulnerabilities across several products. The addressed vulnerabilities could allow the attacker to gain elevated privileges on the affected systems. Sample of the addressed vulnerabilities: 1. NetScaler Authenticated Privilege Escalation Vulnerability (CVE-2024-12284): CVSS: 8.8 Attack Vector: Adjacent Network Attack Complexity: High Privileges Required: High User Interaction: None Consequences:

Microsoft has released an updated Microsoft Edge stable channel “133.0.3065.69” to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to bypass security restrictions or execute arbitrary code and gain access to the affected systems by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: 1. Microsoft Edge (Chromium-based)

Google has released an updated Chrome version “133.0.6943.98/.99” for Windows and Mac and “133.0.6943.98” for Linux. The addressed vulnerabilities could allow the remote attacker to bypass security restrictions or execute arbitrary code and gain access to the affected systems by persuading the victim to visit a specially crafted website. Sample of the addressed vulnerabilities: 1.

Palo Alto has released security updatesto fix multiple vulnerabilities affecting Palo Alto PAN-OS and Palo Alto Cortex XDR. The addressed vulnerabilities could allow the attacker to bypass security restrictions, manipulate data, obtain sensitive information, execute arbitrary commands/codes, and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. PAN-OS Authentication Bypass in the