CVE-2024-22102

Jungo WinDriver prior to 12.6.0 contains a Denial of Service vulnerability that can be triggered by a local attacker to cause a Windows blue screen. The available documents identify the affected product and the DoS impact but do not detail the exact root cause in the provided sources. Mitigation ...

CVE-2024-22105

CVE-2024-22105 affects Jungo WinDriver prior to 12.5.1. The DoS condition is caused by a vulnerability that can allow local attackers to trigger a Windows blue screen. Impact is an availability denial-of-service, with local attack vector and low privileges required as per the provided metrics. Co...

New Medusa Android Trojan Targets Banking Users Across 7 Countries

Cybersecurity researchers have discovered an updated version of an Android banking trojan called Medusa that has been used to target users in Canada, France, Italy, Spain, Turkey, the U.K., and the U.S. The new fraud campaigns, observed in May 2024 and active since July 2023, manifested through...

SUSE-SU-2024:1499-2 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging JDK-8319851,bsc1222979 - CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS lookup JDK-8315708,bsc1222987 -...

OPENSUSE-SU-2024:13285-1 screen-4.9.1-1.1 on GA media

These are all security issues fixed in the screen-4.9.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11374-1 screen-4.8.0-3.17 on GA media

These are all security issues fixed in the screen-4.8.0-3.17 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11884-1 screen-4.9.0-1.1 on GA media

These are all security issues fixed in the screen-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2024-5463

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.182 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the Screen Capture function, which can be exploited by a remote attacker using ...

CVE-2024-27814

This issue was addressed through improved state management. This issue is fixed in watchOS 10.5. A person with physical access to a device may be able to view contact information from the lock screen...

CVE-2024-27814

This issue was addressed through improved state management. This issue is fixed in watchOS 10.5. A person with physical access to a device may be able to view contact information from the lock screen...

CVE-2024-27819

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2024-27819

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2024-27814

This issue was addressed through improved state management. This issue is fixed in watchOS 10.5. A person with physical access to a device may be able to view contact information from the lock screen...

CVE-2024-27819

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to access contacts from the lock screen...

Apple watchOS security breach

Apple watchOS is an operating system for smartwatches from Apple USA. A security vulnerability exists in Apple watchOS version 10.5, which originated when someone with physical access to the device may be able to view contact information from the lock screen...

PT-2024-22053 · Apple · Watchos

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10.5 Description: This issue allows a person with physical access to a device to view contact information from the lock screen. The issue was addressed through improved state management. Recommendations: For watchOS...

CVE-2024-27814: Exposure of Sensitive Information to an Unauthorized Actor

This issue was addressed through improved state management. This issue is fixed in watchOS 10.5. A person with physical access to a device may be able to view contact information from the lock screen...

CVE-2024-27819: Improper Access Control

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to access contacts from the lock screen...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 17.5 and iPadOS version 17.5, which originates from the possibility...

DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks

Cyber attacks involving the DarkGate malware-as-a-service MaaS operation have shifted away from AutoIt scripts to an AutoHotkey mechanism to deliver the last stages, underscoring continued efforts on the part of the threat actors to continuously stay ahead of the detection curve. The updates have...