Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 5.0.21 LTS, 12.0.4 LTS and 12.4.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported...

PT-2024-6720 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a remote code execution vulnerability in the Remote Desktop Client. It is associated with the use of memory after it has been freed, which can be exploited...

PT-2024-6751 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can allow an attacker to elevate their privileges. This can affect the system. Recommendations: A...

The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise, related to the possibility of exploiting memory after deallocation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise is related to the possibility of exploiting memory after release. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Qualcomm’s microprogrammed digital signal processor (DSP) software allows a hacker to gain access to the device.

The vulnerability of Qualcomm’s microprogrammed digital signal processor DSP software lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a hacker to gain access to the device...

The vulnerability of the RDMA/srp component of the Linux operating system allows attackers to increase their privileges.

The vulnerability of the RDMA/srp component of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the ravb component in the Linux operating system’s kernel allows attackers to increase their privileges.

The vulnerability of the ravb component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the WebKit component in iOS operating systems, iPadOS, tvOS, macOS, watchOS, visionOS, and the Safari browser allows a perpetrator to trigger a service failure.

The vulnerability of the WebKit component in iOS, iPadOS, tvOS, macOS, watchOS, visionOS operating systems, and the Safari browser is related to the ability to exploit memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the nft_chain_filter function in the Netfilter component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nftchainfilter function in the Netfilter component of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in its memory usage after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created U3D file...

The vulnerability of the Py_FindObjects() function in the Python programming language library, which is open-source and part of scipy, allows a attacker to compromise the confidentiality, integrity, and accessibility of the system.

The vulnerability of the PyFindObjects function in the Python programming language library, which is open-source and part of scipy, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility ...

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability in the WebCore::RenderLayer::renderer function of WPE WebKit and WebKitGTK rendering module modules allows a attacker to execute arbitrary code.

The vulnerability of the WebCore::RenderLayer::renderer function in WPE WebKit and WebKitGTK rendering module libraries is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability in the `WebCore::RenderLayer::addChild` function of the WPE WebKit and WebKitGTK rendering modules allows a attacker to execute arbitrary code.

The vulnerability of the WebCore::RenderLayer::addChild function in WPE WebKit and WebKitGTK rendering modules is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the dasher_configure_pid() function on the GPAC multimedia platform allows a intruder to trigger a service failure.

The vulnerability of the dasherconfigurepid function on the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the buffer.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the buffer.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the subtitle rendering components in Microsoft Edge and Google Chrome allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the subtitle rendering components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Skia component in Microsoft Edge and Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Skia component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020, particularly those related to memory usage after it is freed, allow attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute...