The vulnerability of Google Chrome’s storage mechanism allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome’s storage mechanism is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML page...

The vulnerability in the implementation of browser import functions by Google Chrome and Microsoft Edge allows attackers to disclose protected information.

The vulnerability of the browser import function implementations in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially created web page...

The vulnerability of the Cloud Mobility for Dell Storage data storage system, related to incorrect authorization, allows a perpetrator to gain access to protected information.

The vulnerability of the Cloud Mobility for Dell Storage storage system is related to incorrect authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information...

OESA-2022-2017 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary da...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from an application that may be able to modify protected portions of the file system. The following products and versions are affected: mac Studio...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in Apple watchOS. An attacker could exploit this vulnerability to modify protected portions of the file system...

PT-2022-28138 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue allows an app to modify protected parts of the file system. This was addressed with improved data protection. Recommendations: For versions prior to 13, update to macOS Ventura 13 to resolve t...

PT-2022-7234 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13 Description: The issue is related to insufficient access control in the APFS component of the macOS operating system. Exploitation of this issue may allow an attacker to disclose protected information. An ap...

PT-2022-21556 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A race condition was addressed with improved state handling, which could allow an app to modify protected parts of the file system. Recommendations: For versions prior to 13, update to macOS Ventura 13 ...

Apple macOS 竞争条件问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from an application that may be able to modify protected portions of the file system. The following products and versions are affected: mac Studio...

The vulnerability of the Adobe Photoshop graphic editor lies in the use of memory after it is freed, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the Adobe Photoshop graphic editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Adobe Bridge file manager, related to the use of memory after it is freed, allows a hacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially crafted file...

The vulnerability of Adobe InCopy, a text creation and editing software, relates to reading beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the Adobe InCopy text creation and editing software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

PT-2022-7235 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved state management, which may allow an app to modify protected parts of the file system. The issue is related to insufficient access control in the Beta Access...

PT-2022-27969 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 macOS Monterey versions prior to 12.6.1 macOS Big Sur versions prior to 11.7.1 Description: A race condition was addressed with additional validation, which may have allowed an app to modify protected parts of the...

PT-2022-6844 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved checks, which may allow an app to modify protected parts of the file system. The issue is related to insufficient access control in the Mac OS operating system,...

The vulnerability of the online business analytics service IBM Cognos Analytics, related to the transmission of critical information in open text format, allows a perpetrator to disclose protected information.

The vulnerability of the online business analytics service IBM Cognos Analytics lies in the transmission of critical information in open text format. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Emotet Botnet Distributing Self-Unlocking Password-Protected RAR Files to Drop Malware

The notorious Emotet botnet has been linked to a new wave of malspam campaigns that take advantage of password-protected archive files to drop CoinMiner and Quasar RAT on compromised systems. In an attack chain detected by Trustwave SpiderLabs researchers, an invoice-themed ZIP file lure was foun...

The vulnerability of the virtual learning environment Moodle, related to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability in the virtual learning environment Moodle is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

The vulnerability of the H5P plugin in the virtual learning environment Moodle, which allows a intruder to gain unauthorized access to protected information

The vulnerability of the H5P plugin in the virtual learning environment Moodle is related to deficiencies in the system’s boundary control mechanisms. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...