Exploits and vulnerabilities – Page 9 – Computer Security Articles

Patch now! September Microsoft Patch Tuesday includes two actively exploited zero-days

September 13, 2023 admin adobe, Android, apple, Azure, Business, chrome, cve-2023-29332, cve-2023-36761, cve-2023-36802, Exchange, Exploits and vulnerabilities, microsoft, news, SAP, visual studio

Categories: Business

Categories: Exploits and vulnerabilities

Categories: News

Tags: Microsoft

Tags: Adobe

Tags: Android

Tags: Apple

Tags: Chrome

Tags: SAP

Tags: Exchange

Tags: Visual Studio

Tags: CVE-2023-36761

Tags: CVE-2023-36802

Tags: CVE-2023-29332

Tags: Azure

Microsoft’s September 2023 Patch Tuesday is another important one. It patches two vulnerabilities which are known to be actively exploited.

MalwareBytes Security

Update Chrome now! Google patches critical vulnerability being exploited in the wild

September 12, 2023 admin 116.0.5845.187/.188, Buffer Overflow, chrome, cve-2023-4863, Exploits and vulnerabilities, google, news, webp

Categories: Exploits and vulnerabilities

Categories: News

Tags: Google

Tags: Chrome

Tags: CVE-2023-4863

Tags: WebP

Tags: buffer overflow

Tags: 116.0.5845.187/.188

Chrome users are being urged to patch a critical vulnerability for which an exploit is available.

MalwareBytes Security

Two Apple issues added by CISA to its catalog of known exploited vulnerabilities

September 12, 2023 admin apple, blastpass, Buffer Overflow, cisa, CitizenLab, cve-2023-41061, cve-2023-41064, Exploits and vulnerabilities, news, nso, Pegasus

Categories: Exploits and vulnerabilities

Categories: News

Tags: Blastpass

Tags: citizenlab

Tags: pegasus

Tags: nso

Tags: cisa

Tags: apple

Tags: cve-2023-41064

Tags: cve-2023-41061

Tags: buffer overflow

CISA has added two recently discovered Apple vulnerabilities to its catalog of known exploited vulnerabilities.

MalwareBytes Security

FBI confirms Barracuda patch is not effective for exploited ESG appliances

August 29, 2023 admin barracuda esg, cve-2023-2868, Exploits and vulnerabilities, news, seaspy, submarine, whirlpool

Categories: Exploits and vulnerabilities

Categories: News

Tags: Barracuda ESG

Tags: CVE-2023-2868

Tags: SEASPY

Tags: SUBMARINE

Tags: WHIRLPOOL

The FBI repeats the warning by Barracuda that all ESG appliances should immediately be replaced because the patch was ineffective.

MalwareBytes Security

Update now! Google Chrome’s first weekly update has arrived

August 25, 2023 admin cve-2023-4427, cve-2023-4428, cve-2023-4429, cve-2023-4430, cve-2023-4431, Exploits and vulnerabilities, heap corruption, out-of-bounds, stable channel, Use After Free, weekly updates

Categories: Exploits and vulnerabilities

Tags: stable channel

Tags: weekly updates

Tags: CVE-2023-4427

Tags: CVE-2023-4428

Tags: CVE-2023-4429

Tags: CVE-2023-4430

Tags: CVE-2023-4431

Tags: use after free

Tags: out of bounds

Tags: heap corruption

The first of Chrome’s now weekly security updates fixes five vulnerabilities.

MalwareBytes Security

[updated] Ivanti Sentry critical vulnerability—don’t play dice, patch

August 25, 2023 admin cve-2023-38035, Exploits and vulnerabilities, Ivanti, mics, mobileiron, news, port 8443, sentry

Categories: Exploits and vulnerabilities

Categories: News

Tags: Ivanti

Tags: Sentry

Tags: MobileIron

Tags: CVE-2023-38035

Tags: MICS

Tags: port 8443

There is some uncertainty about whether a vulnerability in Ivanti Sentry is being exploited in the wild, but why take the risk when you can patch?

MalwareBytes Security

Ivanti Sentry critical vulnerability—don’t play dice, patch

August 23, 2023 admin cve-2023-38035, Exploits and vulnerabilities, Ivanti, mics, mobileiron, news, port 8443, sentry

Categories: Exploits and vulnerabilities

Categories: News

Tags: Ivanti

Tags: Sentry

Tags: MobileIron

Tags: CVE-2023-38035

Tags: MICS

Tags: port 8443

There is some uncertainty about whether a vulnerability in Ivanti Sentry is being exploited in the wild, but why take the risk when you can patch?

MalwareBytes Security

Adobe ColdFusion vulnerability exploited in the wild

August 23, 2023 admin adobe, coldfusion, critical, cve-2023-26359, cve-2023-26360, deserialization, Exploits and vulnerabilities, known exploited, news

Categories: Exploits and vulnerabilities

Categories: News

Tags: Adobe

Tags: ColdFusion

Tags: CVE-2023-26359

Tags: CVE-2023-26360

Tags: critical

Tags: known exploited

Tags: deserialization

A second Adobe ColdFusion vulnerability that was patched in April has been added to CISA’s known exploited vulnerabilities catalog.