The vulnerability of the `ih264d_get_implicit_weights` function (decoder/ih264d_parse_bslice.c) in the Media Framework component of the Android operating system, which allows a perpetrator to manipulate the accessibility of data.

The vulnerability of the ih264dgetimplicitweights function in the decoder/ih264dparsebslice.c file of the Media Framework component of the Android operating system is related to resource management errors. Exploiting this vulnerability could allow a remote attacker to compromise data accessibilit...

The vulnerability of the Media Framework component of the Android operating system, which allows a hacker to compromise the accessibility of data

The vulnerability of the Media Framework component in the Android operating system is related to resource management errors. Exploiting this vulnerability allows an attacker to compromise data accessibility...

Potent Skygofree Malware Packs ‘Never-Before-Seen’ Features

Researchers have identified a powerful new Android malware strain called Skygofree capable of eavesdropping on WhatsApp messages, siphoning private data off phones and allowing adversaries to open reverse shell modules on targeted devices, giving attackers ultimate remote control. Researchers sai...

The vulnerability of Google Chrome’s IndexedDB implementation lies in its reliance on memory after it is released. This allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability in the Google Chrome browser’s IndexedDB implementation relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data through a specially crafted HTML page...

The vulnerability of the component’s dispatcher in SageCRM’s customer relationship management system allows a hacker to increase their privileges and impact the confidentiality, integrity, and accessibility of data.

The vulnerability of the component dispatcher in SageCRM’s customer relationship management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to increase their privileges and compromise the confidentiality, integrity, and...

The vulnerability of the fimg2d driver for the Samsung Exynos 7420 Android operating system, which allows a hacker to compromise data confidentiality, integrity, and accessibility.

The vulnerability of the fimg2d driver for the Samsung Exynos 7420 Android operating system is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to compromise data confidentiality, integrity, and accessibility...

Xxe

Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via progid field...

Google to Block Third-Party Software from Injecting Code into Chrome Browser

To improve performance and reduce crashes caused by third-party software on Windows, Google Chrome, by mid-2018, will no longer allow outside applications to run code within its web browser. If you are unaware, many third-party applications, like accessibility or antivirus software, inject code...

WebKit: use-after-free in WebCore::AXObjectCache::performDeferredCacheUpdate(CVE-2017-13795)

There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. Note that accessibility features need to be enabled in order to trigger this bug. On Safari on Mac this can be accomplished by opening the inspector simply opening the...

WebKit - WebCore::AXObjectCache::performDeferredCacheUpdate Use-After-Free Exploit

Exploit for multiple platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1347 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. Note that accessibility features need to be...

WebKit - 'WebCore::AXObjectCache::performDeferredCacheUpdate' Use-After-Free

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1347 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. Note that accessibility features need to be enabled in order to trigger this bug. On Safari on Mac...

Google Begins Removing Play Store Apps Misusing Android Accessibility Services

Due to rise in malware and adware abusing Android accessibility services, Google has finally decided to take strict steps against the apps on its app platform that misuse this feature. Google has emailed Android app developers informing them that within 30 days, they must show how accessibility...

The vulnerability of the Elastic Cloud Storage storage platform, combined with the use of a pre-installed account, allows attackers to gain access to the system.

The vulnerability of the Dell EMC Elastic Cloud Storage ECS storage platform is related to the use of a pre-installed emcservice account. Exploiting this vulnerability allows an attacker operating remotely to gain access to the system and compromise the confidentiality, integrity, and accessibili...

CVE-2017-1000382

CVE-2017-1000382 is tied to Vim prior to patch levels where 8.0.1187 (and likely other versions) ignores umask when creating a swap file named ​.swp, causing the swap file to be world-readable or accessible in ways not intended by the user running vim. The connected sources confirm this specific ...

CVE-2017-1000382

VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...

The vulnerability of the `sixel_output_create` function (coders/sixel.c) in the console-based graphic editor ImageMagick allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sixeloutputcreate function in the console-based image editing tool ImageMagick is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

New Ransomware Not Just Encrypts Your Android But Also Changes PIN Lock

DoubleLocker—as the name suggests, it locks device twice. Security researchers from Slovakia-based security software maker ESET have discovered a new Android ransomware that not just encrypts users’ data, but also locks them out of their devices by changing lock screen PIN. On top of that:...

Description of the security update for SharePoint Foundation 2013: September 12, 2017

Description of the security update for SharePoint Foundation 2013: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Many Questions, Few Answers For Equifax Breach Victims

Americans who either applied for new jobs, loans, or just wanted to check their credit score via Equifax are having a difficult time getting answers as to whether they are part of the breach of 143 million records that occurred Thursday. The company disclosed yesterday it was the victim of a...

The vulnerability of the Android operating system in the CAF repository exists due to errors in processing QMI messages, allowing a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability of the Android operating system from the CAF repository is related to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of QMI messages during processing...