New Tool DVa Detects and Removes Android Malware

Discover DVa, a new tool that detects and removes malware exploiting accessibility features on Android devices. Learn how…...

The vulnerability of the sanity_check_extent_cache() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sanitycheckextentcache function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the adc128_in_store() function in the Linux kernel driver hwmon allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adc128instore function in the drivers/hwmon/adc128d818.c driver of the Linux kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the seqpacket_allow() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the seqpacketallow function in the Linux operating system’s kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the cachefiles_withdraw_volumes() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cachefileswithdrawvolumes function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CentOS 7 : thunderbird (RHSA-2021:2881)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2881 advisory. - If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the...

The vulnerability of the nvme_tcp_error_recovery_work() function in the Linux operating system’s NVMe driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nvmetcperrorrecoverywork function in the drivers/nvme/host/tcp.c file of the Linux NVMe kernel driver is related to the reutilization of previously released memory due to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the usbtmc component in the Linux operating system allows for interference with the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbtmc component in the Linux operating system’s kernel is related to errors in the control channel transmission direction. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the qcom-geni-serial component in the Linux operating system allows for interference with the confidentiality and accessibility of protected information.

The vulnerability of the qcom-geni-serial component in the Linux operating system is related to it exceeding the buffer limits of the RX FIFO. Exploiting this vulnerability could allow an attacker to influence the confidentiality and accessibility of the protected information...

The vulnerability of the DRM/virtio components of the Linux operating system allows for interference with privacy, integrity, and accessibility.

The vulnerability of the DRM/virtio kernel component in the Linux operating system relates to the possibility of guessing the value of the descriptor and attempting to speed up the creation of a GEM object using the close descriptor. Exploiting this vulnerability could allow an attacker to...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7009-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7009-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

The vulnerability of the `bnx2fc_interface_put` function in the `fs/sysfs/group.c` component of the Linux kernel allows a attacker to compromise the accessibility of protected information.

The vulnerability of the bnx2fcinterfaceput function in the fs/sysfs/group.c component of the Linux kernel is related to the cleanup of the destroywork queue before calling bnx2fcinterfaceput. Exploiting this vulnerability could allow an attacker to influence the accessibility of protected...

The vulnerability of the Py_FindObjects() function in the Python programming language library, which is open-source and part of scipy, allows a attacker to compromise the confidentiality, integrity, and accessibility of the system.

The vulnerability of the PyFindObjects function in the Python programming language library, which is open-source and part of scipy, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility ...

The vulnerability of the netfilter component in the Linux operating system’s kernel, which arises from the use of memory after deallocation, allows for interference with privacy, integrity, and accessibility.

The vulnerability of the netfilter component in the Linux operating system’s kernel relates to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise privacy, integrity, and accessibility...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7007-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

The vulnerability of Google Chrome’s Skia graphic library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome’s Skia graphics library is related to memory-related exploits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7007-3)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-3 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7019-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7019-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer...

CVE-2024-44171

This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, watchOS 11. An attacker with physical access to a locked device may be able to Control Nearby Devices via accessibility features...

CVE-2024-44171

This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, watchOS 11. An attacker with physical access to a locked device may be able to Control Nearby Devices via accessibility features...