CVE-2023-40451

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code...

CVE-2023-40407

CVE-2023-40407 affects macOS Sonoma 14 and is addressed by Apple with improved bounds checks. The vulnerability allows a remote attacker to cause a denial-of-service. The CVE appears across multiple Apple subsystems as listed in the sources, with remediation being macOS Sonoma 14 or later updates...

CVE-2023-41986

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to modify protected parts of the file system...

Customize VDA registration port for DaaS deployments

Change the VDA registration port in a DaaS deployment...

SUSE-SU-2023:3737-1 Security update for bind

This update for bind fixes the following issues: Update to release 9.16.44: - CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly bsc1215472...

SUSE-SU-2023:3662-1 Security update for gcc7

This update for gcc7 fixes the following issues: Security issues fixed: - CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 bsc1214052. - CVE-2019-15847: Fixed POWER9 DARN miscompilation. bsc1149145 - CVE-2019-14250: Includes fix for LTO linker plugin heap overflow. bsc114264...

SUSE-SU-2023:3610-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR bsc1215245. - CVE-2023-4863: Fixed heap buffer overflow in libwebp MFSA 2023-40 bsc1215231. The following non-security bug was fixed: - Fix i586 build by reducing debug info to -g1 bsc1210168...

September 12, 2023-Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.6.2 for Windows Server 2008 SP2 (KB5030185)

September 12, 2023-Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.6.2 for Windows Server 2008 SP2 KB5030185 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.6.2 REMINDER Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 have...

A security community success story of mitigating a misconfiguration

Learn about the process of preventing security issues by changing things outside of your environment by looking at how a misconfiguration was occurring when Github Actions were integrated with AWS IAM roles and the improvements made that have now made this misconfiguration much less likely...

LLMs and Tool Use

Last March, just two weeks after GPT-4 was released, researchers at Microsoft quietly announced a plan to compile millions of APIs--tools that can do everything from ordering a pizza to solving physics equations to controlling the TV in your living room--into a compendium that would be made...

CVE-2023-41061

CVE-2023-41061 is an Apple Wallet code execution vulnerability tied to parsing of PassKit attachments. The CVE’s context in the provided sources shows exploitation potential via a malicious PassKit attachment containing crafted images (notably WebP/MakerNote data) that triggers a heap/grooming se...

Information disclosure

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.5. An app may be able to read sensitive location information...

CVE-2023-34352

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An attacker may be able to leak user account emails...

UBUNTU-CVE-2023-32370

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail...

August 22, 2023—KB5029351 (OS Build 22621.2215) Preview

None None...

Moving to RFwebUI from deprecated themes Default, Green Bubble, or X1

Show the information of deprecated themes Default, Green Bubble, or X1,...

Design/Logic Flaw

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4. An app may be able to leak sensitive user information...

CVE-2022-22655

CVE-2022-22655 affects Apple platforms; Apple documents show an access issue in the Sandbox that could allow an app to leak sensitive user information. It is fixed in macOS Monterey 12.3, iOS 15.4, and iPadOS 15.4. Remediation is to update to the listed OS versions where the Sandbox improvements ...

[SECURITY] Fedora 38 Update: krb5-1.21-3.fc38

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

New Security Advisor amps up security in minutes

Malwarebytes Security Advisor, a transformation of the Nebula customer experience, enables organizations to visualize and improve their organization's security posture in just a few minutes. "If youre not fully configured, you arent fully protected," says Jonny Rivera, Director, Customer Experien...