4147 matches found
August 13, 2024—KB5041782 (OS Build 10240.20751) - EXPIRED
None None...
August 13, 2024—KB5041773 (OS Build 14393.7259) - EXPIRED
None None...
August 13, 2024—KB5041573 (OS Build 25398.1085)
None None...
August 13, 2024—KB5041571 (OS Build 26100.1457)
None None...
August 13, 2024—KB5041580 (OS Builds 19044.4780 and 19045.4780) - EXPIRED
None None...
Redhat: CVE-2023-40547 Shim - RCE in HTTP boot support may lead to secure boot bypass
...
KB5041828: Windows Server 2012 R2 Security Update (August 2024)
The remote Windows host is missing security update 5041828. It is, therefore, affected by multiple vulnerabilities - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the maxglyphsize value, allocating a smaller than neede...
KB5041160: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (August 2024)
The remote Windows host is missing security update 5041160. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...
KB5041585: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (August 2024)
The remote Windows host is missing security update 5041585. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...
KB5041592: Windows 11 version 21H2 Security Update (August 2024)
The remote Windows host is missing security update 5041592. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...
KB5041571: Windows 11 Version 24H2 Security Update (August 2024)
The remote Windows host is missing security update 5041571. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...
CVE-2023-50810
In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used...
CVE-2023-50810: Improper Control of Generation of Code
In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used...
Sonos Speaker Flaws Could Have Let Remote Hackers Eavesdrop on Users
Cybersecurity researchers have uncovered weaknesses in Sonos smart speakers that could be exploited by malicious actors to clandestinely eavesdrop on users. The vulnerabilities "led to an entire break in the security of Sonos's secure boot process across a wide range of devices and remotely being...
PT-2024-13975 · Sonos · Sonos One +5
Name of the Vulnerable Software and Affected Versions: Sonos products versions prior to S1 Release 11.12 and S2 release 15.9 Description: A vulnerability exists in the U-Boot component of the firmware that allows persistent arbitrary code execution with Linux kernel privileges. This is due to a...
CVE-2023-50810
In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used...
CVE-2023-50810
A vulnerability exists in the U-Boot component of the firmware in certain Sonos products, including PLAY5 gen 2, PLAYBASE, PLAY:1, One, One SL, and Amp . The flaw is caused by a failure to correctly handle the return value of the setenv command, which allows an attacker to override kernel command...
Bootloaders explained
TL;DR Modern computers have a program that starts the operating system, known as a bootloader Bootloaders can be communicated with to access storage and sometimes RAM directly They are all individual to the chipset in use. Bootloaders explained In its simplest form, a bootloader is a low-level...
Compromising the Secure Boot Process
This isnt good: On Thursday, researchers from security firm Binarly revealed that Secure Boot is completely compromised on more than 200 device models sold by Acer, Dell, Gigabyte, Intel, and Supermicro. The cause: a cryptographic key underpinning Secure Boot on those models that was compromised ...
OESA-2024-1851 arm-trusted-firmware security update
Trusted Firmware-A is a reference implementation of secure world software for Arm A-Profile architectures Armv8-A and Armv7-A, including an Exception Level 3 EL3 Secure Monitor. Security Fixes: Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Renesas...