Google Squashes High-Severity Flaws in Chrome Browser

On Thursday, Google released security patches to stomp out high-severity vulnerabilities in its Chrome browser. Patches for all the bugs Google disclosed in its security advisory roll out over the next few days. Overall, eight security bugs were addressed in Chrome browser version 80.0.3987.162 f...

openssl:client: Heap-use-after-free in CRYPTO_DOWN_REF

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6296602006519808 Project: openssl Fuzzing Engine: honggfuzz Fuzz Target: client Job Type: honggfuzzasanopenssl Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0x60f00019d8a...

Critical WordPress Plugin Bug Can Lock Admins Out of Websites

A pair of security vulnerabilities in the WordPress search engine optimization SEO plugin, known as Rank Math, could allow remote cybercriminals to elevate privileges and install malicious redirects onto a target site, according to researchers. It’s a WordPress plugin with more than 200,000...

suricata:fuzz_sigpcap: Crash in StatsIncr

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6282538768400384 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcap Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x62400010a110 Crash...

suricata:fuzz_applayerparserparse: Heap-use-after-free in htp_chomp

Detailed Report: https://oss-fuzz.com/testcase?key=5651773898620928 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzapplayerparserparse Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62a00000b4f9 Crash State: htpchomp...

suricata:fuzz_applayerparserparse: Heap-use-after-free in htp_connp_is_line_ignorable

Detailed Report: https://oss-fuzz.com/testcase?key=6197711587246080 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzapplayerparserparse Job Type: aflasansuricata Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6190002949cc Crash State: htpconnpislineignorable...

quickjs:fuzz_compile: Heap-use-after-free in JS_ReadObjectRec

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4863930045562880 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzcompile Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type:...

[ASA-202003-12] chromium: multiple issues

Arch Linux Security Advisory ASA-202003-12 ========================================== Severity: High Date : 2020-03-19 CVE-ID : CVE-2019-20503 CVE-2020-6422 CVE-2020-6424 CVE-2020-6425 CVE-2020-6426 CVE-2020-6427 CVE-2020-6428 CVE-2020-6429 CVE-2020-6449 Package : chromium Type : multiple issues...

Trend Micro Fixes Critical Flaws Under Attack

Trend Micro has released security updates patching five vulnerabilities in its endpoint security solutions, Apex One and OfficeScan XG for Windows. Specifically, Apex One 2019 and OfficeScan XG SP1 and XG are affected by four critical-severity and one high-severity flaws. Two of these...

libreoffice:ww6fuzzer: Heap-use-after-free in SwIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6236629686812672 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

Firefox Bug Opens iPhone AirPods to Third-Party Snooping

Five high-severity bugs were fixed in the Firefox web browser with the release of version 74 by the Mozilla Foundation on Tuesday. In addition, Mozilla reported a quirky moderate-severity flaw that allows hackers to target iPhone users and collect data tied to connected AirPods, if in use. In...

Firefox Bug Opens iPhone AirPods to Third-Party Snooping

Five high-severity bugs were fixed in the Firefox web browser with the release of version 74 by the Mozilla Foundation on Tuesday. In addition, Mozilla reported a quirky moderate-severity flaw that allows hackers to target iPhone users and collect data tied to connected AirPods, if in use. In...

High-Severity Flaws Plague Intel Graphics Drivers

Intel has issued security patches for six high-severity vulnerabilities in its Windows graphics drivers which, if exploited, could enable escalation of privilege, denial of service DoS and information disclosure. The graphics driver is software that controls how graphic components work with the...

High-Severity Flaws Plague Intel Graphics Drivers

Intel has issued security patches for six high-severity vulnerabilities in its Windows graphics drivers which, if exploited, could enable escalation of privilege, denial of service DoS and information disclosure. The graphics driver is software that controls how graphic components work with the...

Intel Smart Sound Technology - Lenovo Support US

No description provided...

Intel Graphics Driver for Windows - Lenovo Support US

Lenovo Security Advisory: LEN-30555 Potential Impact: Escalation of privilege, denial of service and/or information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0501, CVE-2020-0502, CVE-2020-0503, CVE-2020-0504, CVE-2020-0505, CVE-2020-0506, CVE-2020-0507,...

NVIDIA Windows GPU Display Driver Vulnerabilities - February 2020 - Lenovo Support US

Lenovo Security Advisory: LEN-30458 Potential Impact: Denial of service, escalation of privileges, code execution, or information disclosure. Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-5957, CVE-2020-5958, CVE-2020-5959, CVE-2020-5960, CVE-2020-5961 Summary Description...

NVIDIA Windows GPU Display Driver Vulnerabilities - February 2020 - Lenovo Support US

No description provided...

Lenovo XClarity Administrator (LXCA) Vulnerability - Lenovo Support US

No description provided...

Lenovo XClarity Administrator (LXCA) Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-29942 Potential Impact: Information disclosure Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-19756 Summary Description: An internal product security audit of Lenovo XClarity Administrator LXCA discovered Windows OS credentials, used to...