chromium-browser: Inappropriate implementation in accessibility

Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

Memory Corruption

Firefox is vulnerable to memory corruption attacks. This occurs during DOM manipulations of accessibility tree through script, the DOM tree can become out sync with the accessibility tree, crashing the application which results in denial of service...

Privilege Escalation

Oracle MySQL is vulnerable to privilege escalation attacks. A remote user can exploit a flaw in the Pluggable Authentication component to gain elevated privileges. This affects confidentiality, consistency and accessibility...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 74 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 74.0.3729.108 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcomin...

[SECURITY] Fedora 30 Update: gnome-control-center-3.32.1-2.fc30

This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

Google Makes it Tough for Rogue App Developers Get Back on Android Play Store

Even after Google's security oversight over its already-huge Android ecosystem has evolved over the years, malware apps still keep coming back to Google Play Store. Sometimes just reposting an already detected malware app from a newly created Play Store account, or using other developers' existin...

Trusted Platform Module Cryptographic Processor

The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Intel Graphics Driver User Mode Driver Data Compromise

The vulnerability of the User Mode Driver component of the Intel Graphics Driver relates to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Trusted Platform Module Cryptographic Processor

The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Internet Explorer Privilege Bypass

The vulnerability of the Internet Explorer browser is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to partially compromise the confidentiality, integrity, and accessibility of protected information through a specially created URL address...

Akamai in the Community: Making Tech Accessible

Here at Akamai, we believe every person is important, and that no one should be left out. Our internal culture is cultivated by looking outwards, into the community, to make the life of our society better. Not only do we...

Ghostscript Heap Buffer Overflow DoS

The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Online Accessibility <= 2.0.10 - CSRF and lack of Authorisation in AJAX methods

The Accessibility Suite by Online ADA WordPress plugin was affected by a CSRF and lack of Authorisation in AJAX methods security vulnerability...

Information Disclosure

openstack-mistral is vulnerable to information disclosure attacks. The vulnerability exists as an accessibility flaw was found in the OpenStack Workflow mistral service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access...

Blink Google Chrome Data Compromise

The vulnerability of the Blink web browser component of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML...

Tor Is Easier Than Ever. Time to Give It a Try

Been curious about Tor but worried it's too complicated to use? Good news: The anonymity service is more accessible than ever...

GNU Libextractor Heap Buffer Overflow DoS

The vulnerability of the EXTRACTORzipextractmethod method zipextractor.c in the GNU Libextractor library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

Android Trojan Targets PayPal Users

Want to download an Android battery utility app from a third-party Android app store? What could possibly go wrong? Last month researchers downloaded a power management app called “Optimization Android” from an undisclosed third-party app store. What they found was instead of optimizing the phone...

The 25th anniversary of the webcam: What did it bring us?

How did the webcam progress from a simple convenience to a worldwide security concern in 25 years? November 2018 can be marked as the 25th anniversary of the webcam. This is a bit of an arbitrary choice, but if we consider a webcam that was installed at the University of Cambridge to keep an eye ...

Workspace Browser Compatibility

Workspace is accessible by any computer with a supported web browser and an Internet connection. In order to utilize all features and functions of Citrix Workspace, we recommend using a web browser listed in the Workspace system requirements. FAQ 1. I don't see my browser on this list... do you...