June 27, 2019 — KB4502584 Cumulative Update for .NET Framework 3.5, 4.8 for Windows 10, version 1903 and Windows Server 1903 RTM

None None...

The vulnerability of the PostgreSQL database management system, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2019-2091

In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege, with no additional permissions required. User interaction is not needed for exploitation...

chromium-browser: Inappropriate implementation in accessibility

Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

Memory Corruption

Firefox is vulnerable to memory corruption attacks. This occurs during DOM manipulations of accessibility tree through script, the DOM tree can become out sync with the accessibility tree, crashing the application which results in denial of service...

Privilege Escalation

Oracle MySQL is vulnerable to privilege escalation attacks. A remote user can exploit a flaw in the Pluggable Authentication component to gain elevated privileges. This affects confidentiality, consistency and accessibility...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 74 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 74.0.3729.108 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcomin...

[SECURITY] Fedora 30 Update: gnome-control-center-3.32.1-2.fc30

This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

Google Makes it Tough for Rogue App Developers Get Back on Android Play Store

Even after Google's security oversight over its already-huge Android ecosystem has evolved over the years, malware apps still keep coming back to Google Play Store. Sometimes just reposting an already detected malware app from a newly created Play Store account, or using other developers' existin...

The vulnerability of microprogramming software to the Trusted Platform Module (TPM) cryptographic processor, related to security configuration errors, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of microprogramming software to the Trusted Platform Module (TPM) cryptographic processor, related to security configuration errors, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the User Mode Driver component of the Intel Graphics Driver allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the User Mode Driver component of the Intel Graphics Driver relates to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Internet Explorer browser, related to insecure management of privileges, allows attackers to partially compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Internet Explorer browser is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to partially compromise the confidentiality, integrity, and accessibility of protected information through a specially created URL address...

Akamai in the Community: Making Tech Accessible

Here at Akamai, we believe every person is important, and that no one should be left out. Our internal culture is cultivated by looking outwards, into the community, to make the life of our society better. Not only do we...

The vulnerability of the Ghostscript software for document processing, conversion, and generation arises from operations that go beyond buffer boundaries in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Online Accessibility <= 2.0.10 - CSRF and lack of Authorisation in AJAX methods

The Accessibility Suite by Online ADA WordPress plugin was affected by a CSRF and lack of Authorisation in AJAX methods security vulnerability...

Information Disclosure

openstack-mistral is vulnerable to information disclosure attacks. The vulnerability exists as an accessibility flaw was found in the OpenStack Workflow mistral service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access...

The vulnerability of the Blink web browser component in Google Chrome allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Blink web browser component of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML...

Tor Is Easier Than Ever. Time to Give It a Try

Been curious about Tor but worried it's too complicated to use? Good news: The anonymity service is more accessible than ever...

The vulnerability of the EXTRACTOR_zip_extract_method() method in the GNU Libextractor library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EXTRACTORzipextractmethod method zipextractor.c in the GNU Libextractor library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...