Apple has patched a critical use-after-free vulnerability that could allow malicious applications to elevate privileges on affected devices.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
A newly identified vulnerability in 7-Zip allows attackers to bypass the Mark-of-the-Web protection, potentially leading to arbitrary code execution.
A serious deserialization vulnerability has been discovered in SonicWall SMA1000 appliances, allowing potential remote command execution by unauthenticated attackers.
Research · Jan 15, 2025
Critical Authorization Flaw Discovered in SimpleHelp Software
A serious vulnerability has been identified in SimpleHelp software, allowing unauthorized privilege escalation through API keys.
A serious authentication bypass vulnerability has been identified in Fortinet's FortiOS and FortiProxy, allowing attackers to gain unauthorized access to super-admin privileges.
A newly identified stack-based buffer overflow vulnerability in Ivanti's Connect Secure, Policy Secure, and ZTA Gateways poses significant security risks, allowing potential unauthorized code execution.
A significant OS command injection vulnerability has been identified in Aviatrix Controllers, allowing unauthenticated attackers to execute arbitrary code.
Research · Dec 30, 2024
Linux Kernel Fixes Out-of-Bounds Access Vulnerability
A critical out-of-bounds access vulnerability in the Linux kernel has been addressed, enhancing the security of audio devices connected via USB.
A critical OS command injection vulnerability has been identified in DrayTek Vigor routers, necessitating immediate upgrades to safeguard against potential exploitation.
A newly discovered Denial of Service vulnerability in Palo Alto Networks PAN-OS could allow attackers to disrupt firewall operations by sending malicious DNS packets.
A critical out-of-bounds read vulnerability in the Linux kernel's USB-audio driver has been patched, enhancing system security against potential exploits.
A critical code injection vulnerability has been identified in Craft CMS, affecting users with specific php.ini configurations. Immediate updates are recommended to ensure security.