In the security patch bundle released this Tuesday by Microsoft, fixes for 63 vulnerabilities and exposures were provided. Five of the vulnerabilities are considered “Critical,” 57 of them are “Important,” and one is rated “Moderate.” Specifically, the flaws are composed of one Security Feature Bypass Vulnerabilities, …
Many OEMs today are using Unisoc SoCs to power their entry-level smartphones. For instance, Realme is using Unisoc processors in its C-series phones, Infinix is using it in Hot series models, and Motorola and Micromax are also using it in some of their phones. This is …
Security researcher Mathy Vanhoef discovered several security vulnerabilities that affect most Wi-Fi devices. The collection of attacks, called FragAttacks, which stands for fragmentation and aggregation attacks, requires that that attacker is within range of the wireless network. Three of the discovered vulnerabilities are “design flaws in …
Fortinet has fixed multiple severe vulnerabilities impacting its products. The vulnerabilities range from Remote Code Execution (RCE) to SQL Injection, to Denial of Service (DoS) and impact the FortiProxy SSL VPN and FortiWeb Web Application Firewall (WAF) products. Some vulnerabilities reported 2 years ago Multiple advisories …
Adobe has released security updates to address critical severity security bugs affecting Windows and macOS versions of Adobe Lightroom and Adobe Prelude. In total, the company addressed four security vulnerabilities affecting three products, three of them rated as critical and one as an important severity bug …
Of late, Facebook-owned messaging platform WhatsApp has been in the news for all the good reasons but not this time. Some vulnerabilities are found in WhatsApp iOS version, a report by the Indian Computer Emergency Response Team (CERT-In) stated. The report suggested that multiple vulnerabilities have …
Adobe has released security updates to address critical severity vulnerabilities affecting Adobe Acrobat and Reader for Windows and macOS that could enable attackers to execute arbitrary code on vulnerable devices. In all, the company today addressed 14 security flaws affecting the two products, 10 of them …
SaltStack, a VMware-owned company, has revealed critical vulnerabilities impacting Salt versions 3002 and prior, with patches available as of today. Salt is an open-source IT infrastructure management solution written in Python that is widely used by data centers around the world. Users are therefore encouraged to …
If you’ve been reading about security bugs online, you’ve probably ran into scores given to exploits. These are scored based on the Common Vulnerability Scoring System, used to categorize exploits into the Common Vulnerability and Exposures database. We’ll discuss what makes up the score. What Affects …
Today a collection of severe security vulnerabilities in the WPA2 encryption protocol for Wi-Fi are being disclosed, along with a proof of concept exploit. The weaknesses center around the process used for negotiating the encryption keys used by the client and access point. These core vulnerabilities …
