PT-2024-14289 · Jungo · Windriver

Name of the Vulnerable Software and Affected Versions: Jungo WinDriver versions prior to 12.1.0 Description: A Denial of Service DoS issue allows local attackers to cause a Windows blue screen error. Recommendations: For versions prior to 12.1.0, update to version 12.1.0 or later to resolve the...

Jungo WinDriver 安全漏洞

Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. An out-of-bounds write vulnerability exists in...

New Medusa Android Trojan Targets Banking Users Across 7 Countries

Cybersecurity researchers have discovered an updated version of an Android banking trojan called Medusa that has been used to target users in Canada, France, Italy, Spain, Turkey, the U.K., and the U.S. The new fraud campaigns, observed in May 2024 and active since July 2023, manifested through...

SUSE-SU-2024:1499-2 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging JDK-8319851,bsc1222979 - CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS lookup JDK-8315708,bsc1222987 -...

OPENSUSE-SU-2024:11374-1 screen-4.8.0-3.17 on GA media

These are all security issues fixed in the screen-4.8.0-3.17 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11884-1 screen-4.9.0-1.1 on GA media

These are all security issues fixed in the screen-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13285-1 screen-4.9.1-1.1 on GA media

These are all security issues fixed in the screen-4.9.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2024-5463

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.182 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the Screen Capture function, which can be exploited by a remote attacker using ...

CVE-2024-27819

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2024-27819

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2024-27814

This issue was addressed through improved state management. This issue is fixed in watchOS 10.5. A person with physical access to a device may be able to view contact information from the lock screen...

CVE-2024-27814

This issue was addressed through improved state management. This issue is fixed in watchOS 10.5. A person with physical access to a device may be able to view contact information from the lock screen...

CVE-2024-27814

This issue was addressed through improved state management. This issue is fixed in watchOS 10.5. A person with physical access to a device may be able to view contact information from the lock screen...

CVE-2024-27819

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to access contacts from the lock screen...

Apple watchOS security breach

Apple watchOS is an operating system for smartwatches from Apple USA. A security vulnerability exists in Apple watchOS version 10.5, which originated when someone with physical access to the device may be able to view contact information from the lock screen...

PT-2024-22053 · Apple · Watchos

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10.5 Description: This issue allows a person with physical access to a device to view contact information from the lock screen. The issue was addressed through improved state management. Recommendations: For watchOS...

CVE-2024-27814: Exposure of Sensitive Information to an Unauthorized Actor

This issue was addressed through improved state management. This issue is fixed in watchOS 10.5. A person with physical access to a device may be able to view contact information from the lock screen...

CVE-2024-27819: Improper Access Control

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to access contacts from the lock screen...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 17.5 and iPadOS version 17.5, which originates from the possibility...

DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks

Cyber attacks involving the DarkGate malware-as-a-service MaaS operation have shifted away from AutoIt scripts to an AutoHotkey mechanism to deliver the last stages, underscoring continued efforts on the part of the threat actors to continuously stay ahead of the detection curve. The updates have...