Google Chrome < 86.0.4240.183 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.183. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop advisory. - Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183...

CVE-2020-27986

creationtimestamp| type| source ---|---|--- 2020-10-29 01:33:09+00:00| seen| https://t.me/cibsecurity/15703 2021-05-10 02:45:38+00:00| seen| https://t.me/pwnwikizhchannel/394 2024-11-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-12 2024-11-17...

CVE-2020-6449

creationtimestamp| type| source ---|---|--- 2020-10-27 20:10:51+00:00| exploited| https://t.me/canyoupwnme/6659 2020-10-28 13:19:45+00:00| exploited| https://t.me/CyberSecurityTechnologies/1996...

TikTok: Information Disclosure of Advertiser Account on TikTok Ads Portal

In the TikTok Ads portal, if both invited Ad Accounts are part of the same business group, an exposed endpoint could potentially be exploited to view email address, phone number, company, and name of the Ad Account owner. We thank @emanuelharijanto for reporting this to our team and confirming th...

APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elections Organizations

Summary This joint cybersecurity advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. Note: the analysis in this joint cybersecurity advisory is ongoing, and the...

NSA Alert: Chinese State-Sponsored Actors Exploit Known Vulnerabilities

On October 20, 2020, the United States National Security Agency NSA released a cybersecurity advisory on Chinese state-sponsored malicious cyber activity. The NSA alert provided a list of 25 publicly known vulnerabilities that are known to be recently leveraged by cyber actors for various hacking...

New Chrome 0-day Under Active Attacks – Update Your Browser Now

Attention readers, if you are using Google Chrome browser on your Windows, Mac, or Linux computers, you need to update your web browsing software immediately to the latest version Google released earlier today. Google released Chrome version 86.0.4240.111 today to patch several security...

NSA Advisory on Chinese Government Hacking

The NSA released an advisory listing the top twenty-five known vulnerabilities currently being exploited by Chinese nation-state attackers. This advisory provides Common Vulnerabilities and Exposures CVEs known to be recently leveraged, or scanned-for, by Chinese state-sponsored cyber actors to...

Google Chrome < 86.0.4240.111 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.111. It is, therefore, affected by multiple vulnerabilities as referenced in the 202010stable-channel-update-for-desktop20 advisory. - Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed...

Google Chrome < 86.0.4240.111 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.111. It is, therefore, affected by multiple vulnerabilities as referenced in the 202010stable-channel-update-for-desktop20 advisory. - Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a...

EUVD-2020-12050

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafte...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-61773)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, a U.S. Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. Microsoft Windows and Windows Server have an elevation of privilege...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-61771)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. Microsoft Windows and Windows Server have an elevation of privilege vulnerability that can be exploited by...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-61776)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. Microsoft Windows and Windows Server have an elevation of privilege vulnerability that can be exploited by...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-61778)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Windows Server, which can be...

CVE-2020-7318

creationtimestamp| type| source ---|---|--- 2020-10-14 22:39:51+00:00| seen| https://t.me/cibsecurity/15273 2020-12-31 18:34:35+00:00| exploited| https://t.me/CyberSecurityTechnologies/2246 2021-03-24 14:20:37+00:00| published-proof-of-concept| https://t.me/reconshell/586 2021-09-21 06:42:55+00:0...

Windows COM Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability, an attacker would first have to log on to the system. An...

CVE-2020-15505

creationtimestamp| type| source ---|---|--- 2020-10-13 06:50:38+00:00| seen| MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4 2020-10-13 15:16:18+00:00| seen| MISP/f628d96f-2958-4717-91da-e86aace4925d 2020-10-20 15:57:21+00:00| seen| MISP/42d04e94-bf5b-427d-acc8-f5d740675941 2020-10-20 15:58:05+00:00|...

CVE-2019-9978

creationtimestamp| type| source ---|---|--- 2020-10-09 15:23:48+00:00| seen| MISP/012ae48d-aab7-4bf9-91cc-f09e50fddc28 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 21:59:47+00:00|...

CVE-2019-7256

creationtimestamp| type| source ---|---|--- 2020-10-09 14:02:20+00:00| seen| MISP/4cf681c5-0bde-42c8-aece-998f0a4ed7b1 2023-01-05 00:32:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linearemergeunauthrcecve20197256.rb 2024-03-14...