openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10180-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10180-1 advisory. - Type Confusion in V8. CVE-2022-3652, CVE-2022-3723 - Heap buffer overflow in Vulkan. CVE-2022-3653 - Use after free in Layout...

CVE-2022-3659

CVE-2022-3659 refers to a use-after-free vulnerability in Chrome OS Accessibility in Google Chrome, prior to version 107.0.5304.62, allowing a remote attacker to potentially trigger heap corruption via specific UI interactions. Connected sources confirm the issue is categorized as a Chrome/Chromi...

CVE-2022-3659: Use After Free

Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. Chromium security severity: Medium...

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10177-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10177-1 advisory. - Type Confusion in V8. CVE-2022-3652, CVE-2022-3723 - Heap buffer overflow in Vulkan. CVE-2022-3653 - Use after free in Layout...

Google Chrome Internals Data Compromise

The vulnerability of Google Chrome’s Internals component is related to writing beyond the buffer. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Google Chrome Accessibility code execution vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which is caused by a free use in Accessibility. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service on the system...

Kimsuky Hackers Spotted Using 3 New Android Malware to Target South Koreans

The North Korean espionage-focused actor known as Kimsuky has been observed using three different Android malware strains to target users located in its southern counterpart. That's according to findings from South Korean cybersecurity company S2W, which named the malware families FastFire,...

Gstreamer qtdemux_inflate Buffer Overflow

The vulnerability of the qtdemuxinflate function in the Gstreamer multimedia framework is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

[SECURITY] Fedora 36 Update: libksba-1.6.2-1.fc36

KSBA pronounced Kasbah is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS...

Hackers Using Vishing to Trick Victims into Installing Android Banking Malware

Malicious actors are resorting to voice phishing vishing tactics to dupe victims into installing Android malware on their devices, new research from ThreatFabric reveals. The Dutch mobile security company said it identified a network of phishing websites targeting Italian online-banking users tha...

CVE-2022-41643

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Accessibility plugin = 1.0.3 on WordPress...

WordPress Accessibility plugin <= 1.0.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. Stored Cross-Site Scripting XSS vulnerability discovered by ptsfence Patchstack Alliance in WordPress Accessibility plugin versions = 1.0.3. Solution Update the WordPress Accessibility plugin to the latest available version at least 1.0.4...

CVE-2022-34431

Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being accessible...

Memory corruption

Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being accessible...

CVE-2022-34431

CVE-2022-34431 affects Dell Hybrid Client prior to version 1.8, where a guest user profile corruption vulnerability could be exploited by a WMS-privileged attacker to render the DHC system inaccessible. Documents confirm affected software and root cause (guest profile corruption) and suggest reme...

CVE-2022-34431

Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being accessible...

Description of the security update for SharePoint Server Subscription Edition: October 11, 2022 (KB5002290)

None None...

Netgear Nighthawk AC1900 strcpy Buffer Overflow DoS

The vulnerability of the strcpy function in Netgear Nighthawk AC1900 R7000 wireless router software lies in the fact that the write operation goes beyond the buffer boundaries into memory when processing the binary file wl. Exploiting this vulnerability could allow an attacker to compromise the...

Vim do_tag() Function Use-After-Free

The vulnerability of the dotag function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Vim Buffer Overflow

The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...