Memory corruption vulnerability in Microsoft Edge; MilesightVPN and router could be taken over

Since the beginning of July, Cisco Talos has published 40 vulnerability advisories affecting a range of software and hardware, including the Microsoft Edge browser. In our new series called "Vulnerability Roundup," well be recapping the vulnerabilities we recently disclosed to provide readers wit...

CVE-2023-27390

creationtimestamp| type| source ---|---|--- 2023-07-05 20:22:03+00:00| seen| https://t.me/cibsecurity/65994...

CVE-2023-27390

A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-27390

Diagon v1.0.139 contains a heap-based buffer overflow in Sequence::DrawText that can lead to arbitrary code execution when processing a specially crafted Markdown file. Talos-TALOS-2023-1744 confirms the vulnerable version and describes the path where DrawText writes text to the Screen buffer, en...