Microsoft Azure Sphere mtd character device driver privilege escalation vulnerability

Summary An arbitrary flash write vulnerability exists in the mtd character device driver of Microsoft Azure Sphere 20.06. A specially crafted ioctl can bypass file permissions and allow writes to flash by unauthorized users. An attacker can issue a MEMWRITE ioctl to trigger this vulnerability...

CVE-2020-14319

A flaw was found in the AMQ Online console, where it is vulnerable to a Cross-Site Request Forgery attack CSRF, which is exploitable in cases where preflight checks are not instigated or bypassed. This flaw allows an attacker to target authorized users using an older browser with Adobe Flash. The...

amq-on: CSRF (in graphQL requests)

A flaw was found in the AMQ Online console, where it is vulnerable to a Cross-Site Request Forgery attack CSRF, which is exploitable in cases where preflight checks are not instigated or bypassed. This flaw allows an attacker to target authorized users using an older browser with Adobe Flash. The...

The vulnerability in the `fs/f2fs/inline.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/f2fs/inline.c component in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the Flash Player software platform, related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and execute arbitrary code.

The vulnerability of the Adobe Flash Player software relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and execute arbitrary code with system privileges...

TAU Threat Analysis: Bundlore (macOS) mm-install-macos

The mm-install-macos variant of the Bundlore family of macOS adware has been around for many years in many variations and delivery methods. Recently, a variant with a novel installation method was discovered. Although most of the installation details were the same or similar to the samples analyz...

Adobe Prompts Users to Uninstall Flash Player As EOL Date Looms

With Flash Player’s Dec. 31, 2020 kill date quickly approaching, Adobe said that it will start prompting users to uninstall the software in the coming months. The End of Life EOL timeline has been a long time coming. Adobe first announced in July 2017 that it will no longer update or distribute...

Sneaky Mac Malware Is Posing as Flash Downloads

Plus: OnlyFans pirates, a nasty Netgear bug, and more of the week's top security news...

The vulnerability of the Flash Player software, related to a data type conversion error, allows attackers to execute arbitrary code.

The vulnerability of the Flash Player software is related to a data type conversion error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Shlayer Mac Malware Returns with Extra Sneakiness

A fresh variant of the Shlayer Mac OSX malware with advanced stealth capabilities has been spotted in the wild, actively using poisoned Google search results in order to find its victims. According to researchers at Intego, the malware, like many malware samples before it, is purporting to be an...

GLSA-202006-09 : Adobe Flash Player: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202006-09 Adobe Flash Player: Arbitrary code execution An unspecified flaw has been discovered in Adobe Flash Player. Impact : This flaw can be exploited by attackers for remote code execution. Workaround : There is no known...

RHEL 6 : flash-plugin (RHSA-2020:2547)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2547 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version...

flash-plugin: Arbitrary Code Execution vulnerability (APSB20-30)

A use-after-free flaw was found in the Adobe Flash Player. This flaw an attacker to perform arbitrary code execution when the Flash player is used to play a specially crafted SWF file. The highest threat from this vulnerability is to confidentiality, integrity and system availability...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

MGASA-2020-0264 Updated flash-player-plugin packages fix security vulnerability

The updated packages fix a security vulnerability: Use after free that leads to arbitrary code execution in the context of the current user. CVE-2020-9633...

Updated flash-player-plugin packages fix security vulnerability

The updated packages fix a security vulnerability: Use after free that leads to arbitrary code execution in the context of the current user. CVE-2020-9633...

Adobe Flash Player: Arbitrary code execution

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description An unspecified flaw has been discovered in Adobe Flash Player. Impact This flaw can be exploited by attackers for remote code execution. Workaround There is...

CVE-2020-9633

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...

CVE-2020-9633

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...

CVE-2020-9633

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...