March 18, 2021—KB5001648 (OS Build 18363.1443) Out-of-band

None None...

WordPress < 4.9 Multiple Vulnerabilities

WordPress is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Operation Dianxun Cyberespionage Campaign Targeting Telecommunication Companies

ARCHIVED STORY Operation Diànxùn: Cyberespionage Campaign Targeting Telecommunication Companies By Thomas Roccia · MAR 16, 2021 In this report the McAfee Advanced Threat Research ATR Strategic Intelligence team details an espionage campaign, targeting telecommunication companies, dubbed Operation...

CVE-2021-27208

When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...

Buffer overflow

When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...

CVE-2021-27208

When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...

March 15, 2021—KB5001568 (OS Build 17763.1821) Out-of-band

None None...

March 15, 2021—KB5001567 (OS Builds 19041.868 and 19042.868) Out-of-band

None None...

March 9, 2021—KB5000808 (OS Build 18363.1440)

None None...

March 9, 2021—KB5000840 (Security-only update)

None None...

March 9, 2021—KB5000822 (OS Build 17763.1817)

None None...

March 9, 2021—KB5000807 (OS Build 10240.18874)

None None...

March 9, 2021—KB5000803 (OS Build 14393.4283) - EXPIRED

None None...

March 9, 2021—KB5000802 (OS Builds 19041.867 and 19042.867)

None None...

March 9, 2021—KB5000853 (Security-only update)

None None...

March 9, 2021—KB5000848 (Monthly Rollup)

None None...

March 9, 2021—KB5000847 (Monthly Rollup)

None None...

Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part Two)

In this post, we continue our analysis of the SolarCity ConnectPort X2e Zigbee device referred to throughout as X2e device. In Part One, we discussed the X2e at a high level, performed initial network-based attacks, then discussed the hardware techniques used to gain a remote shell on the X2e...

February 16, 2021-KB4601383 (OS Build 17763.1790) Preview

None None...

Adobe Flash Player Memory Use After Free

The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious actor to bypass security...