January 9, 2024—KB5034123 (OS Builds 22621.3007 and 22631.3007)

None None...

January 9, 2024—KB5034169 (Monthly Rollup)

None None...

January 9, 2024—KB5034121 (OS Build 22000.2713)

None None...

Microsoft Subsystem for Linux Security Vulnerability

Microsoft Windows Subsystem for Linux WSL is a Windows subsystem for Linux from Microsoft, a compatibility layer capable of running native Linux binary executables ELF format. A security vulnerability exists in Microsoft Subsystem for Linux. An attacker could exploit the vulnerability to gain...

Microsoft Windows Themes Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Themes. An attacker could exploit this vulnerability to obtain sensitive information. The following products and...

Amazon Linux 2 : java-11-openjdk (ALASJAVA-OPENJDK11-2024-006)

The version of java-11-openjdk installed on the remote host is prior to 11.0.21.0.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2JAVA-OPENJDK11-2024-006 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE component: JSSE...

Microsoft Windows AllJoyn API Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows AllJoyn API. An attacker has exploited the vulnerability to cause a denial of service on the system. The...

KB5034121: Windows 11 version 21H2 Security Update (January 2024)

The remote Windows host is missing security update 5034121. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-20654 - BitLocker Security Feature Bypass Vulnerability CVE-2024-20666 - Windows Kerberos Security Feature Bypass...

KLA62827 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...

KB5034123: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (January 2024)

The remote Windows host is missing security update 5034123. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-20654 - BitLocker Security Feature Bypass Vulnerability CVE-2024-20666 - Windows Kerberos Security Feature Bypass...

AsyncRAT Infiltrates Key US Infrastructure Through GIFs and SVGs

By Deeba Ahmed Undetected for Over 11 Months, AsyncRAT Lurked on Systems of Sensitive US Agencies with Critical Infrastructures, reports the… This is a post from HackRead.com Read the original post: AsyncRAT Infiltrates Key US Infrastructure Through GIFs and SVGs...

CVE-2023-38620

creationtimestamp| type| source ---|---|--- 2024-01-08 16:32:12+00:00| seen| https://t.me/ctinow/164458 2024-01-11 21:17:16+00:00| seen| https://t.me/ctinow/166842...

Themebleed Windows 11 Themes Arbitrary Code Execution Exploit

When an unpatched Windows 11 host loads a theme file referencing an msstyles file, Windows loads the msstyles file, and if that file's PACKMEVERSION is 999, it then attempts to load an accompanying dll file ending in vrf.dll. Before loading that file, it verifies that the file is signed. It does...

CVE-2016-4385

creationtimestamp| type| source ---|---|--- 2024-01-06 11:59:46+00:00| seen| https://t.me/arpsyndicate/2529...

CVE-2023-39853

creationtimestamp| type| source ---|---|--- 2024-01-06 05:31:41+00:00| seen| https://t.me/ctinow/163819 2024-01-11 17:17:11+00:00| seen| https://t.me/ctinow/166653 2024-01-25 00:21:22+00:00| seen| https://t.me/ctinow/173180...

CVE-2024-20805

Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file...

CVE-2024-20804

Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file...

Path traversal

Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows attackers to write arbitrary file...

Path traversal

Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows attackers to write arbitrary file...

CVE-2024-20805

The CVE-2024-20805 entry documents a path traversal vulnerability in the ZipCompressor of MyFiles. Affected: Samsung Android devices running MyFiles on Android 11/12 (prior to SMR Jan-2024 Release 1) and Android 13 (MyFiles 14.5.00.21). Impact: local attackers can write arbitrary files. Root caus...