Citrix Virtual Apps and Desktops Security Update

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM. This...

July 7, 2021—KB5004960 (Security-only update) Out-of-band

None None...

CVE-2021-23999

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

Mozilla Firefox 注入漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Firefox that allows an attacker to exploit the vulnerability to disclose arbitrary memory addresses, which may also lead to JIT-type obfuscation attacks. The...

SUSE-SU-2021:1919-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 78.11.0 ESR bsc1186696 CVE-2021-29964: Out of bounds-read when parsing a WMCOPYDATA message CVE-2021-29967: Memory safety bugs fixed in Firefox...

SUSE: Security Advisory (SUSE-SU-2020:3902-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:14743-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:14743-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 78.11.0 ESR bsc1186696 CVE-2021-29964: Out of bounds-read when parsing a WMCOPYDATA message CVE-2021-29967: Memory safety bugs fixed in Firefox...

June 8, 2021—KB5003667 (Monthly Rollup)

None None...

June 8, 2021—KB5003681 (Security-only update)

None None...

June 8, 2021—KB5003696 (Security-only update)

None None...

June 8, 2021—KB5003671 (Monthly Rollup)

None None...

June 8, 2021—KB5003697 (Monthly Rollup)

None None...

Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11

Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird 78.11,...

Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11

Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird 78.11,...

Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11

Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird 78.11,...

Ubuntu Apport 后置链接漏洞

Canonical Ubuntu is a GNU/Linux operating system from the British company Canonical that focuses on desktop applications. A security vulnerability exists in Ubuntu Apport that stems from the incorrect handling of certain information gathering operations, which can be exploited by an attacker who...

May 11, 2021—KB5003208 (Monthly Rollup)

None None...

The vulnerability in the Thunderbird email client, as well as in the Firefox and Firefox ESR browsers, stems from insufficient validation of input data. This allows attackers to circumvent security restrictions.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, relates to errors during permission saving, allowing a malicious actor to mistakenly assign a security certificate to an HTTP page.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to errors during the saving of permissions. Exploiting this vulnerability could allow a remote attacker to erroneously assign a security certificate to an HTTP page...