Citrix Virtual Apps and Desktops 2407 : Sophos Endpoint Agent gets loaded into ICA user session

Published app sessions are getting loaded with Sophos Endpoint Agent. This is seen under Workspace app Connection Center. Sophos Endpoint agent is getting loaded into all the Citrix ICA sessions. Citrix Workspace app Connection Center shows the "Sophos Endpoint Agent - Notification Icon". Sophos...

Microsoft Security Update Validation Report April 2025

Microsoft’s April 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

Zoom Client for Meetings < 6.3.10 Vulnerability (ZSB-25015)

The version of Zoom Client for Meetings installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25015 advisory. - Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of...

CVE-2024-52282: Exposure of Sensitive Information to an Unauthorized Actor

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with GET access to the Rancher Manager Apps Catalog to read any sensitive information that are contained within the Apps’ values. Additionally, the same information leaks into auditing lo...

Microsoft 365 Apps for Enterprise Use-After-Free Privilege Escalation

The vulnerability of Microsoft 365 Apps for Enterprise and Office relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft 365 Apps for Enterprise Memory Use After Free

The vulnerability of Microsoft 365 Apps for Enterprise and Office relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Microsoft 365 Apps for Enterprise Memory Use After Free

The vulnerability of Microsoft 365 Apps for Enterprise and Office relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Microsoft 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft 365 Apps for Enterprise and Office relates to the use of an untrusted pointer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

CVE-2025-30670

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30671

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-27441

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...

CVE-2025-27442

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...

Child predators are lurking on dating apps, warns report

Using a dating app? Beware of your potential partner's motives. A report from Edinburgh University warns that child abusers are using these apps to find single parents with vulnerable children. The Searchlight 2025 report, from the University's Childlight Global Child Safety Institute, analyses t...

Microsoft Office Full Integer Overflow Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise, as well as Microsoft Access, is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Package Bypass

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of an incomplete blacklist. Exploiting this vulnerability could allow a hacker to bypass security restrictions...

Microsoft 365 Apps for Enterprise Memory Use Code Execution

The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Memory Use Code Execution

The vulnerability of the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...