Exploits and vulnerabilities – Page 30 – Computer Security Articles

MalwareBytes Security

Update now! Chrome patches actively exploited zero-day vulnerability

February 15, 2022 admin animation, chrome, cve-2022-0609, Exploits and vulnerabilities, uaf

Credit to Author: Pieter Arntz| Date: Tue, 15 Feb 2022 13:50:16 +0000

Google has patched 11 bugs in Chrome, one of which was being actively exploited.

Categories: Exploits and vulnerabilities

Tags: Animation chrome cve-2022-0609 UAF

MalwareBytes Security

Adobe patches actively exploited Magento/Adobe Commerce zero-day

February 14, 2022 admin adobe, CMS, commerce, cve-2022-24086, Exploits and vulnerabilities, Magecart, Magento

Credit to Author: Pieter Arntz| Date: Mon, 14 Feb 2022 13:55:44 +0000

Users of Adobe Commerce and Magento are vulnerable to a zero-day with a CVSS score of 9.8 out of 10.

Categories: Exploits and vulnerabilities

Tags: adobe CMS commerce cve-2022-24086 Magecart magento

MalwareBytes Security

Update now! Apple fixes actively exploited zero-day

February 11, 2022 admin cve-2022-22620, Exploits and vulnerabilities, iOS, ipados, monterey, uaf, Webkit

Credit to Author: Pieter Arntz| Date: Fri, 11 Feb 2022 11:27:06 +0000

Your Macs, iPads, and iPhones all need to be updated.

Categories: Exploits and vulnerabilities

Tags: cve-2022-22620 iOS iPadOS Monterey UAF webkit

MalwareBytes Security

SAP customers are urged to patch critical vulnerabilities in multiple products

February 10, 2022 admin cve-2022-22356, cvss, Exploits and vulnerabilities, icm, icmad, netweaver, onapsis, SAP

Credit to Author: Pieter Arntz| Date: Thu, 10 Feb 2022 08:58:36 +0000

SAP customers are advised to urgently apply the February patches issued by the German software maker. The patch addresses a vulnerability in multiple SAP products that is easy to exploit.

Categories: Exploits and vulnerabilities

Tags: cve-2022-22356 CVSS icm icmad NetWeaver Onapsis sap

MalwareBytes Security

Update now! Firefox and Adobe updates are more critical than Microsoft’s

February 9, 2022 admin cve-2022-21984, cve-2022-21989, cve-2022-21996, cve-2022-22005, cve-2022-22752, cve-2022-23186, cve-2022-23188, cve-2022-23200, cve-2022-23202, cve-2022-23203, cve-2202-22754, Exploits and vulnerabilities, Firefox, Mozilla, Patch Tuesday

Credit to Author: Pieter Arntz| Date: Wed, 09 Feb 2022 12:10:20 +0000

Patch Tuesday for February 2022 comes with some critical updates from Firefox and Adobe, while Microsoft keeps it cool after the January hustle.

Categories: Exploits and vulnerabilities

Tags: cve-2022-21984 cve-2022-21989 cve-2022-21996 cve-2022-22005 cve-2022-22752 cve-2022-23186 cve-2022-23188 cve-2022-23200 cve-2022-23202 cve-2022-23203 cve-2202-22754 firefox mozilla patch tuesday

MalwareBytes Security

Threat actor steals email with Zimbra zero-day

February 4, 2022 admin emailthief, Exploits and vulnerabilities, temp_heretic, XSS, Zero-Day

Credit to Author: Pieter Arntz| Date: Fri, 04 Feb 2022 16:07:15 +0000

Researchers have uncovered a targeted phishing campaign exploiting a XSS zero-day vulnerability in the Zimbra email platform.

Categories: Exploits and vulnerabilities

Tags: EmailThief TEMP_Heretic xss zero-day

(Read more…)

The post Threat actor steals email with Zimbra zero-day appeared first on Malwarebytes Labs.

MalwareBytes Security

Samba patches critical vulnerability that allows remote code execution as root

February 2, 2022 admin cve-2022-44142, cvss, Exploits and vulnerabilities, netatalk, samba, SMB, vfs_fruit

Credit to Author: Pieter Arntz| Date: Tue, 01 Feb 2022 15:22:52 +0000

Developers of Samba, the free SMB networking protocol, have issued a security update that patches one very high rating vulnerability in the VFS module vfs_fruit.

Categories: Exploits and vulnerabilities

Tags: cve-2022-44142 CVSS Netatalk samba SMB vfs_fruit