Android Security Bulletin—October 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-10-06 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

CVE-2023-32477

Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-privileged malicious user may potentially exploit this vulnerability to gain elevated privileges...

CVE-2023-32477

Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-privileged malicious user may potentially exploit this vulnerability to gain elevated privileges...

Improper access control

Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-privileged malicious user may potentially exploit this vulnerability to gain elevated privileges...

CVE-2023-32477

Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-privileged malicious user may potentially exploit this vulnerability to gain elevated privileges...

CVE-2023-32477

Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-privileged malicious user may potentially exploit this vulnerability to gain elevated privileges...

CVE-2023-32477

Dell Common Event Enabler (module of Dell OpenManage Client Instrumentation) has an improper access control vulnerability affecting 8.9.8.2 and earlier. A local low-privileged attacker can potentially gain elevated privileges via this component. The PT-2023-6497 entry summarizes the affected vers...

CVE-2023-44166

creationtimestamp| type| source ---|---|--- 2023-09-29 02:37:14+00:00| seen| https://t.me/cibsecurity/71250...

CVE-2023-43740

creationtimestamp| type| source ---|---|--- 2023-09-29 00:37:06+00:00| seen| https://t.me/cibsecurity/71239...

Dell Common Event Enabler 访问控制错误漏洞

Dell Common Event Enabler is a framework from Dell USA. Dell Common Event Enabler has an Access Control Error vulnerability that stems from incorrect access control. An attacker could exploit the vulnerability to elevate privileges...

PT-2023-6497 · Dell · Dell Common Event Enabler

Name of the Vulnerable Software and Affected Versions: Dell Common Event Enabler versions 8.9.8.2 and prior Description: The issue is related to an improper access control vulnerability in the Dell Common Event Enabler module, which is part of the Dell OpenManage Client Instrumentation OMCI...

CVE-2023-38433

creationtimestamp| type| source ---|---|--- 2023-09-28 12:51:59+00:00| seen| https://t.me/cibsecurity/67294 2023-11-13 19:18:36+00:00| seen| https://t.me/arpsyndicate/159 2025-08-17 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-08-17 2025-08-19 21:02:32+00:00| seen...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in vp8 encoding in libvpx. Remediation Upgrade CefSharp.Common.NETCore to version 117.2.20 or higher. References - Chrome Releases - GitHub Commit - GitHub Commit - GitHub PR - GitHub PR - GitHub PR - GitHub P...

Heap-based Buffer Overflow

Overview CefSharp.Common is a the CefSharp Chromium-based browser component 'Core' and common 'Element' components, needed by both WPF and WinForms. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in vp8 encoding in libvpx. Remediation Upgrade CefSharp.Common to...

Security Bulletin: Due to use of Apache Pulsar, IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is vulnerable to a security restrictions bypass.

Summary Pulsar is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library. CVE-2023-30428, CVE-2023-30429, CVE-2023-37579 and CVE-2023-31007 The below vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-30428 DESCRIPTION: Apache Pulsar could allow a...

CVE-2023-44047

creationtimestamp| type| source ---|---|--- 2023-09-28 00:42:00+00:00| seen| https://t.me/cibsecurity/71160...

PT-2023-28594 · Unknown · Common Voice

Name of the Vulnerable Software and Affected Versions: Common Voice version 1.88.2 Description: The issue is related to reflected Cross-Site Scripting XSS in the context of Common Voice’s server origin, given that user-controlled data flows to a path expression. This may lead to reflected...

CVE-2023-35813

creationtimestamp| type| source ---|---|--- 2023-09-26 15:23:42+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/7811 2023-12-31 05:27:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6343 2024-01-01 05:39:46+00:00| seen| https://t.me/arpsyndicate/2298 2024-01-01...

fido-device-onboard bug fix and enhancement update

An update is available for fido-device-onboard. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fido-device-onboard package provides a rust implementation of...

dmidecode security update

An update is available for dmidecode. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dmidecode packages provide utilities for extracting Intel 64 and Intel...