July 13, 2021—KB5004307 (Security-only update)

None None...

July 13, 2021—KB5004299 (Security-only update)

None None...

Description of the security update for Office Web Apps Server 2013: July 13, 2021 (KB5001986)

None None...

Code injection

The Bluetooth function of some Huawei smartphones has a DoS vulnerability. Attackers can install third-party apps to send specific broadcasts, causing the Bluetooth module to crash. This vulnerability is successfully exploited to cause the Bluetooth function to become abnormal. Affected product...

Citrix Releases Security Updates for Virtual Apps and Desktops

Citrix has released security updates to address a vulnerability in multiple versions of Virtual Apps and Desktops. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review Citrix Security Update CTX319750 and apply the...

PT-2021-5600 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions affected versions not specified Microsoft Word versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description: The issue is related to insufficient inp...

Security Updates for Microsoft Office Web Apps (July 2021)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities: - Multiple remote code execution vulnerabilities in Microsoft Excel. CVE-2021-34501, CVE-2021-34518 - A spoofing vulnerability in Microsoft Offic...

Citrix Systems Citrix Virtual Apps and Desktops 安全漏洞

Citrix Virtual Apps and Desktops is a virtualization software from Citrix Systems USA that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Virtual Apps and Desktops. The vulnerability allows users of a Windows VDA with the...

July 13, 2021 Public preview security update (KB5004243)

None None...

Citrix Virtual Apps and Desktops Security Update

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM. This...

CVE-2021-25428

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...

CVE-2021-25430

Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application...

CVE-2021-25428

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...

Input validation

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...

CVE-2021-25430

Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application...

SAMSUNG FactoryCameraFB 安全漏洞

Samsung FactoryCameraFB is a system application from Samsung South Korea. An access control error vulnerability exists in Samsung Mobile FactoryCameraFB. An attacker could use this vulnerability to allow an untrusted application to access arbitrary files with escalated privileges...

PT-2021-16617 · Samsung · Samsung Message

Name of the Vulnerable Software and Affected Versions: Samsung Message versions prior to SMR July-2021 Release 1 Description: The issue is related to an improper component protection vulnerability in the SmsViewerActivity of Samsung Message. This vulnerability allows untrusted applications to...

170 fraudulent Android apps scamming cryptocurrency enthusiasts

By Deeba Ahmed So far, these fake Android app developers have managed to steal money from 93,000 users and raked in around $350,000. This is a post from HackRead.com Read the original post: 170 fraudulent Android apps scamming cryptocurrency enthusiasts...

Cloud Cryptomining Swindle in Google Play Rakes in Cash

Bogus cryptomining apps for Android available for download on Google Play are estimated to have scammed more than 93,400 victims to date, researchers said, stealing at least $350,000. According to Lookout, the apps – categorized into “BitScam” and “CloudScam” versions – advertise themselves as...

Android Apps in Google Play Harvest Facebook Credentials

A set of nine malicious Android apps that steal Facebook credentials were found on Google Play, which racked up a collective 5.9 million installations before Google removed them. According to Dr. Web’s malware analysts, the applications were fully functional, so that victims remained in the dark...