Stable Channel Update for ChromeOS / ChromeOS Flex

Hello All, The Stable channel is being updated to 108.0.5359.75 Platform version: 15183.59.0 for most ChromeOS devices and will be rolled out over the next few days. For Chrome browser fixes, see the Chrome Desktop release announcement. If you find new issues, please let us know one of the...

Execution Unit Scheduler Contention Side-Channel Vulnerability on AMD Processors

Bulletin ID: AMD-SB-1039 Potential Impact: Information Disclosure Severity: Medium Summary Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2”, “Zen 3” and “Zen 4” that use simultaneous multithreading SMT. By...

Stable Channel Promotion for ChromeOS

Hello All, The Stable channel is being updated to 104.0.5112.83 Platform version: 14909.100.0 for most ChromeOS devices and will be rolled out over the next few days. For Chrome browser fixes, see the Chrome Desktop release announcement. If you find new issues, please let us know one of the...

AMD CPU Branch Type Confusion

Bulletin ID: AMD-SB-1037 Potential Impact: Information disclosure, arbitrary speculative code execution Severity: Medium Summary This security bulletin addresses two issues related to CVE-2017-5715 previously known as Spectre Variant 2. As part of our efforts to continue improving security...

AMD CPUs May Transiently Execute Beyond Unconditional Direct Branch

Bulletin ID: AMD-SB-1026 Potential Impact: Data leakage Severity: Medium Summary AMD is providing an update for one recommended mitigation, mitigation G-5, in the “Software Techniques for Managing Speculation on AMD processors” white paper. Mitigation G-5 helps address potential vulnerabilities...

CVE-2021-33166

Incorrect default permissions for the IntelR RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access...

Information disclosure

Incorrect default permissions for the IntelR RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33166

Incorrect default permissions for the IntelR RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33166

CVE-2021-33166 affects the Intel RXT for Chromebook application (all versions). The issue is incorrect default permissions that may let an authenticated local user cause information disclosure (confidentiality impact HIGH per CVSS 3.1; base score 5.5). Public documents confirm this vulnerability ...

CVE-2021-33166

Incorrect default permissions for the IntelR RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33166: Incorrect Default Permissions

Incorrect default permissions for the IntelR RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access...

PT-2022-10217

Name of the Vulnerable Software and Affected Versions IntelR RXT for Chromebook affected versions not specified Description The issue concerns incorrect default permissions in the IntelR RXT for Chromebook application. This may allow an authenticated user to potentially enable information...

Intel RXT for Chromebook 安全漏洞

Intel Rxt For Chromebook is an Intel Rxt application for Chromebooks from Intel Corporation USA. A security vulnerability exists in the Intel RXT for Chromebook application that stems from a potential security hole in the Intel RXT for Chromebook application. An attacker could exploit the...

Intel® RXT for Chromebook Advisory

Summary: A potential security vulnerability in the Intel® RXT for Chromebook application may allow information disclosure. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® RXT for Chromebook application...

Porn Showed Up on Legit News Sites Thanks to Internet Rot

Plus: China's pipeline probing, a Chromebook debacle, and more of the week's top security news...

Receiver for Chromebook Users Cannot Log On to Access Gateway Enterprise Edition

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. Users running the Receiver for Chromebook 1.0 cannot log on to Access Gateway Enterprise Edition...

Do Chromebooks need antivirus protection?

The supervisor handed Jim a Chromebook and said: “Take this home with you and use it to send me updates. We want to minimize the number of visits to the office—anything you can do from home helps keep this place safer. When the pandemic is over, I’d like to have it back in one piece, if possible....

Citrix PDF Printer Not Auto Creating With Workspace app for Chrome OS

Customer having an issue with Workspace on the Chromebooks. The "Citrix PDF Printer" is not auto creating when logging into a Windows 10 desktop session. The "Auto-Create PDF Universal Printer" policy is set to enabled, but it's not creating the printer when logging into a session. Logging in fro...

A week in security (December 17 – 23)

Last week on Labs we looked at Fuchsia OS as a possible alternative for Android, explained all the reasons why cybercriminals want to hack your phone, discussed a flaw in Twitter form that may have been abused by nation states, gave you a Christmas tech scams roundup, revealed why many online...

A week in security (October 29 – November 4)

Last week on Malwarebytes Labs, we looked at a rogue cryptocurrency app installing backdoors, took a dive into the world of printer security, explored browser privacy tweaks, highlighted a music festival–themed breach, and introduced Malwarebytes for Chromebook. Other cybersecurity news Memory...