Alerts

Google has released an updated Chrome version (112.0.5615.49/50) for Windows and (112.0.5615.49) for Linux and Mac to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to gain access, execute arbitrary code on the system, bypass security restrictions, or trigger a buffer overflow by persuading the victim to visit a specially crafted webpage on the affected […]

Samba has released security updates to fix several vulnerabilities in multiple Samba versions. The addressed vulnerabilities could allow the remote attacker to perform several attacks such as: obtaining confidential BitLocker recovery keys from a Samba AD DC caused by an insufficient fix for confidential attribute disclosure vulnerability “CVE-2018-10919” using LDAP filters or deleting the “dnsHostname” attribute from any object in

Apple has released security updates to address multiple vulnerabilities in the updated version of macOS Big Sur 11.7.5, macOS Monterey 12.6.4, macOS Ventura 13.3, and Safari 16.4.  The addressed vulnerabilities could allow the attacker to gain privileges, bypass security restrictions, obtain information, or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities:

Microsoft has released security updates to fix several vulnerabilities across multiple products. The released security updates are fixing security flaws in Snipping tool, Snip & Sketch, and Microsoft Edge (Chromium-based). The addressed vulnerabilities could allow the attacker to obtain sensitive information, execute arbitrary code on the system, cause a denial of service, or trigger a buffer overflow by persuading the

Cisco has released security updates to address vulnerabilities affecting multiple products. The addressed vulnerabilities could allow the remote attacker to execute arbitrary commands, gain access, bypass security restrictions, gain privileges, obtain information, or cause a denial of service attack on the affected systems. Sample of the addressed vulnerabilities: 1. Cisco IOS XE Software Denial of Service (CVE-2023-20027): •

Google has released an updated Chrome version (111.0.5563.110/.111) for Windows and (111.0.5563.110) for Linux and Mac to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code on the system, cause a denial of service or trigger a buffer overflow by persuading the victim to visit a specially crafted webpage on the affected

Zoom has released security updates to fix vulnerabilities in multiple products. The addressed vulnerabilities could allow the attacker to perform remote code execution, gain elevated privileges, or cause a denial of service attack on the affected product. Sample of the addressed vulnerabilities: 1. Improper Trust Boundary Implementation for SMB in Zoom Clients (CVE-2023-22885): • CVSS: 8.3 • Attack

Mozilla has released security updates to fix vulnerabilities in Firefox 111 and Firefox ESR 102.9. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, perform a spoofing attack, cause a denial of service attack, or execute arbitrary code and gain access to vulnerable systems. Sample of the addressed vulnerabilities: Mozilla Firefox Code Execution Vulnerability (CVE-2023-28177):

Cisco has released security updates to address vulnerabilities affecting multiple products. addressed vulnerabilities could allow the attacker to obtain sensitive information, or cause a denial of service attack on the affected products by sending a crafted IPv4 BFD packet to make line card exceptions or hard reset. Sample of the addressed vulnerabilities: Cisco IOS XR Software for

Veeam has released a security patch to fix a vulnerability that affects all Veeam Backup & Replication versions. The addressed vulnerability could allow the remote attacker to obtain encrypted credentials stored in the configuration database and gain access to the backup infrastructure hosts. It should be highlighted that the patch must be installed on the Veeam Backup & Replication

Google has released an updated Chrome version (111.0.5563.64/.65) for Windows and (111.0.5563.64) for Linux and Mac to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code on the system, cause a denial of service or trigger a buffer overflow by persuading the victim to visit a specially crafted webpage on the affected

SonicWall has released security updates to address vulnerabilities in SonicOS which runs on SonicWall firewalls and provides the web management interface for configurations. The addressed vulnerabilities could allow the remote attacker to cause a denial of service attack or bypass security restrictions on the affected products. Sample of the addressed vulnerabilities: SonicOS Unauthenticated Stack-Based Buffer Overflow (CVE-2023-0656): •