Lucene search
+L

1336 matches found

The Hacker News
The Hacker News
added 2021/04/07 10:36 a.m.10 views

WhatsApp-based wormable Android malware spotted on the Google Play Store

Cybersecurity researchers have discovered yet another piece of wormable Android malware—but this time downloadable directly from the official Google Play Store—that's capable of propagating via WhatsApp messages. Disguised as a rogue Netflix app under the name of "FlixOnline," the malware comes...

5.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/04/07 10:36 a.m.135 views

WhatsApp-based wormable Android malware spotted on the Google Play Store

Cybersecurity researchers have discovered yet another piece of wormable Android malware—but this time downloadable directly from the official Google Play Store—that's capable of propagating via WhatsApp messages. Disguised as a rogue Netflix app under the name of "FlixOnline," the malware comes...

7.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/04/07 7:16 a.m.9 views

Pre-Installed Malware Dropper Found On German Gigaset Android Phones

In what appears to be a fresh twist in Android malware, users of Gigaset mobile devices are encountering unwanted apps that are being downloaded and installed through a pre-installed system update app. "The culprit installing these malware apps is the Update app, package name com.redstone.ota.ui,...

5.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/04/07 7:16 a.m.32 views

Pre-Installed Malware Dropper Found On German Gigaset Android Phones

In what appears to be a fresh twist in Android malware, users of Gigaset mobile devices are encountering unwanted apps that are being downloaded and installed through a pre-installed system update app. "The culprit installing these malware apps is the Update app, package name com.redstone.ota.ui,...

1.1AI score
SaveExploits0
NCSC
NCSC
added 2021/04/07 12:00 a.m.13 views

Vulnerabilities fixed in WhatsApp

Vulnerabilities have been fixed in WhatsApp. A malicious party could potentially exploit the vulnerabilities to obtain sensitive information or to cause a denial-of-service. The vulnerability with CVE attribute CVE-2021-24027 only applies to applicable to WhatsApp for Android and WhatsApp Busines...

10CVSS6.9AI score0.03805EPSS
SaveExploits1
Malwarebytes
Malwarebytes
added 2021/04/06 8:32 p.m.266 views

Pre-installed auto installer threat found on Android mobile devices in Germany

Users primarily located in Germany are experiencing malware that downloads and installs on their Gigaset mobile devices—right out of the box! The culprit installing these malware apps is the Update app, package name com.redstone.ota.ui, which is a pre-installed system app. This app is not only th...

7.1AI score
SaveExploits0
OSV
OSV
added 2021/04/06 5:15 p.m.9 views

CVE-2021-24027

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material...

7.5CVSS5.8AI score0.03805EPSS
SaveExploits1References1
NVD
NVD
added 2021/04/06 5:15 p.m.28 views

CVE-2021-24026

A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for iOS prior to v2.21.32, and WhatsApp Business for iOS prior to v2.21.32 could have allowed an out-of-bounds write...

10CVSS0.01406EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/06 5:15 p.m.11 views

CVE-2021-24026

A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for iOS prior to v2.21.32, and WhatsApp Business for iOS prior to v2.21.32 could have allowed an out-of-bounds write...

9.8CVSS7.3AI score0.01406EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/06 5:15 p.m.44 views

CVE-2021-24027

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material...

7.5CVSS0.03805EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/04/06 5:15 p.m.6 views

CVE-2021-24026

A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for iOS prior to v2.21.32, and WhatsApp Business for iOS prior to v2.21.32 could have allowed an out-of-bounds write...

10CVSS7.2AI score0.01406EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/06 5:15 p.m.26 views

Out-of-bounds

A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for iOS prior to v2.21.32, and WhatsApp Business for iOS prior to v2.21.32 could have allowed an out-of-bounds write...

10CVSS8.6AI score0.01406EPSS
SaveExploits0References1Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/04/06 5:15 p.m.5 views

CVE-2021-24027

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material...

7.5CVSS7.2AI score0.03805EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/04/06 5:15 p.m.36 views

Default configuration

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material...

5CVSS7.2AI score0.03805EPSS
SaveExploits1References1Affected Software2
CVE
CVE
added 2021/04/06 4:45 p.m.69 views

CVE-2021-24026

CVE-2021-24026 is a high-severity remote code execution flaw in WhatsApp’s audio decoding pipeline. A missing bounds check in the audio decoding path could allow an out-of-bounds write when processing calls, affecting WhatsApp for Android (pre-2.21.3) and WhatsApp Business for Android (pre-2.21.3...

10CVSS8.7AI score0.01406EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/04/06 4:45 p.m.45 views

CVE-2021-24027

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material...

7.5AI score0.03805EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/04/06 4:45 p.m.39 views

CVE-2021-24026

A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for iOS prior to v2.21.32, and WhatsApp Business for iOS prior to v2.21.32 could have allowed an out-of-bounds write...

9.1AI score0.01406EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/06 4:45 p.m.255 views

CVE-2021-24027

CVE-2021-24027 is a vulnerability affecting WhatsApp for Android and WhatsApp Business for Android prior to/including v2.21.4.18, causing a cache configuration issue that could allow a third party with access to external storage to read cached TLS material. The issue is described as a sensitive i...

7.5CVSS7.2AI score0.03805EPSS
SaveExploits1References1Affected Software2
CNNVD
CNNVD
added 2021/04/06 12:00 a.m.11 views

Facebook WhatsApp 缓冲区错误漏洞

Facebook WhatsApp is a suite of mobile applications from Facebook Inc. in the United States that use the Internet to send text messages. The application uses the contact information in a smartphone to find contacts using the program to send texts, pictures, etc. WhatsApp Business is the commercia...

10CVSS6AI score0.01406EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/06 12:00 a.m.12 views

Facebook WhatsApp 安全漏洞

Facebook WhatsApp is a suite of mobile applications from Facebook Inc. in the United States that use the Internet to send text messages. The application uses the contact information in a smartphone to find contacts using the program to send texts, pictures, etc. WhatsApp Business is the commercia...

7.5CVSS5.7AI score0.03805EPSS
SaveExploits1References2
Rows per page
Query Builder