Alerts

Apple has released security updates to address two zero-day vulnerabilities in macOS Ventura 13.3, and Safari 16.4. The addressed vulnerabilities could allow the attacker to gain access by sending specially crafted web content or gain kernel privileges by a specially crafted application. The actively exploited zero-day vulnerabilities: CVE-2023-28205 – A use after free issue in WebKit that could

Cisco has released security updates to address several vulnerabilities affecting multiple products. The addressed vulnerabilities could allow the remote attacker to execute arbitrary commands, gain access, bypass security restrictions, obtain information, cause a denial of service, or trigger a cross-site scripting attack on the affected products. Sample of the addressed vulnerabilities: 1. Cisco Secure Network Analytics Code Execution

Google has released an updated Chrome version (112.0.5615.49/50) for Windows and (112.0.5615.49) for Linux and Mac to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to gain access, execute arbitrary code on the system, bypass security restrictions, or trigger a buffer overflow by persuading the victim to visit a specially crafted webpage on the affected

Samba has released security updates to fix several vulnerabilities in multiple Samba versions. The addressed vulnerabilities could allow the remote attacker to perform several attacks such as: obtaining confidential BitLocker recovery keys from a Samba AD DC caused by an insufficient fix for confidential attribute disclosure vulnerability “CVE-2018-10919” using LDAP filters or deleting the “dnsHostname” attribute from any object in

Apple has released security updates to address multiple vulnerabilities in the updated version of macOS Big Sur 11.7.5, macOS Monterey 12.6.4, macOS Ventura 13.3, and Safari 16.4.  The addressed vulnerabilities could allow the attacker to gain privileges, bypass security restrictions, obtain information, or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities:

Microsoft has released security updates to fix several vulnerabilities across multiple products. The released security updates are fixing security flaws in Snipping tool, Snip & Sketch, and Microsoft Edge (Chromium-based). The addressed vulnerabilities could allow the attacker to obtain sensitive information, execute arbitrary code on the system, cause a denial of service, or trigger a buffer overflow by persuading the

Cisco has released security updates to address vulnerabilities affecting multiple products. The addressed vulnerabilities could allow the remote attacker to execute arbitrary commands, gain access, bypass security restrictions, gain privileges, obtain information, or cause a denial of service attack on the affected systems. Sample of the addressed vulnerabilities: 1. Cisco IOS XE Software Denial of Service (CVE-2023-20027): •

Google has released an updated Chrome version (111.0.5563.110/.111) for Windows and (111.0.5563.110) for Linux and Mac to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code on the system, cause a denial of service or trigger a buffer overflow by persuading the victim to visit a specially crafted webpage on the affected

Zoom has released security updates to fix vulnerabilities in multiple products. The addressed vulnerabilities could allow the attacker to perform remote code execution, gain elevated privileges, or cause a denial of service attack on the affected product. Sample of the addressed vulnerabilities: 1. Improper Trust Boundary Implementation for SMB in Zoom Clients (CVE-2023-22885): • CVSS: 8.3 • Attack

Mozilla has released security updates to fix vulnerabilities in Firefox 111 and Firefox ESR 102.9. The addressed vulnerabilities could allow the remote attacker to obtain sensitive information, perform a spoofing attack, cause a denial of service attack, or execute arbitrary code and gain access to vulnerable systems. Sample of the addressed vulnerabilities: Mozilla Firefox Code Execution Vulnerability (CVE-2023-28177):

Cisco has released security updates to address vulnerabilities affecting multiple products. addressed vulnerabilities could allow the attacker to obtain sensitive information, or cause a denial of service attack on the affected products by sending a crafted IPv4 BFD packet to make line card exceptions or hard reset. Sample of the addressed vulnerabilities: Cisco IOS XR Software for