Citrix ADC and Gateway Zero-Day Vulnerability Exploited by APT5

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Patch Tuesday for December tackles two zero-day vulnerabilities, one of which is being actively exploited CVE-2022-44698 and another that was publicly disclosed at the time of release CVE-2022-44710, alo...

Microsoft Patch Tuesday, December 2022 Edition

Microsoft has released its final monthly batch of security updates for 2022, fixing more than four dozen security holes in its various Windows operating systems and related software. The most pressing patches include a zero-day in a Windows feature that tries to flag malicious files from the Web,...

Patch Tuesday - December 2022

As far as Patch Tuesdays go, defenders have a relatively light month to close out the year with only 48 CVEs being published by Microsoft today. This does not include the 24 previously disclosed vulnerabilities affecting their Chromium-based Edge browser. There are two zero-days in the mix today...

CVE-2022-44710

DirectX Graphics Kernel Elevation of Privilege Vulnerability...

CVE-2022-44710

DirectX Graphics Kernel Elevation of Privilege Vulnerability...

CVE-2022-44710

DirectX Graphics Kernel Elevation of Privilege Vulnerability...

CVE-2022-44710 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2022-44710

CVE-2022-44710: DirectX Graphics Kernel Elevation of Privilege vulnerability in Windows, reportedly exploitable via a race condition and requiring local access with low privileges; CVSS v3.1 base score 7.8 (HIGH). Patch guidance is to install the relevant Windows updates (as per December 2022 Pat...

CVE-2022-44710 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...