The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to improper checking of the return value of a function. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the Network Address Translation (NAT) technology in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Network Address Translation NAT technology in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Guest OS File Restore Fails on Self-Referencing Junction Points

Challenge Using Guest OS File Restore to restore a folder containing a junction point that redirects back to the initial folder fails with the error: Win32 error:The name of the file cannot be resolved by the system. Code: 1921 For example, attempting to restore a user's AppData folder the restor...

PT-2024-6719 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Remote Desktop Client versions prior to 1.2.5709 Description: The issue is related to a use-after-free vulnerability in the Remote Desktop Protocol RDP Client of Windows operating systems. This vulnerability can be exploited by a remote...

The vulnerability of the Power Automate for Desktop automation platform on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Power Automate for Desktop automation platform for Windows operating systems is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the WebKit component in iOS operating systems, iPadOS, tvOS, macOS, watchOS, visionOS, and the Safari browser allows a perpetrator to trigger a service failure.

The vulnerability of the WebKit component in iOS, iPadOS, tvOS, macOS, watchOS, visionOS operating systems, and the Safari browser is related to the ability to exploit memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the WebKit component in iOS operating systems, iPadOS, tvOS, macOS, watchOS, visionOS, and the Safari browser allows a perpetrator to execute arbitrary code.

The vulnerability of the WebKit component in iOS, iPadOS, tvOS, macOS, watchOS, visionOS operating systems, and the Safari browser is related to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of Windows operating systems, related to the use of an insecure search path, allows attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to the use of an insecure search path. Exploiting this vulnerability can allow an attacker to increase their privileges...

SUSE CVE-2024-40857

This issue was addressed through improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously crafted web content may lead to universal cross site scripting...

[SECURITY] Fedora 40 Update: cups-2.4.10-7.fc40

CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

[SECURITY] Fedora 39 Update: cups-2.4.10-7.fc39

CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

Apple Releases Security Updates for Multiple Products

Apple released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply necessary updates: i...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...

CVE-2024-44183

A logic error was addressed with improved error handling. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to cause a denial-of-service...

CVE-2024-44165

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. Network traffic may leak outside a VPN tunnel...

CVE-2024-44165

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Network traffic may leak outside a VPN tunnel...

CVE-2024-44198

CVE-2024-44198 : An integer overflow was mitigated via improved input validation. Affected products include visionOS 2; watchOS 11; macOS Sequoia 15; iOS 18; iPadOS 18; tvOS 18. Processing maliciously crafted web content may crash the process. Remediation is to upgrade to the fixed versions liste...