MGASA-2022-0263 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.55 and fixes at least the following security issues: There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges CVE-2022-2318. Xen Block and Networ...

Ring shares data with police without consent (but it’s in good faith), says Amazon

Ring, the Amazon-owned company behind the popular smart doorbells, has admitted to giving doorbell data to law enforcement willy-nilly. All they have to do is fill out a form called the Amazon Law Enforcement Request Tracker—no need to ask for the data owners consent, give a warrant or court orde...

CVE-2022-26137

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses. Atlassian has confirmed and fixed the only known security issue associated with this vulnerability:...

zrok

zrok - Secure internet sharing made simple !zrok logodocs/...

Firefox Thunderbird CORS Unauthorized Access

The vulnerability of the CORS Cross-Origin Resource Sharing mechanism implementation in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to the inclusion of functions from an unreliable controlled domain during the processing of the Access-Control-Allow-Credentials heade...

Firefox Thunderbird CORS Bypass

The vulnerability of the CORS Cross-Origin Resource Sharing mechanism implementation in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to the inclusion of functions from an unreliable controlled domain. Exploiting this vulnerability allows a malicious actor to bypass...

U.S. FTC Vows to Crack Down on illegal Use and Sharing of Citizens' Sensitive Data

The U.S. Federal Trade Commission FTC warned this week that it will crack down on tech companies' illegal use and sharing of highly sensitive data and false claims about data anonymization. "While many consumers may happily offer their location data in exchange for real-time crowd-sourced advice ...

CVE-2022-30225

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability...

CVE-2022-30225

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability...

CVE-2022-30225

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability...

CVE-2022-30225 Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability

...

CVE-2022-30225 Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability

...

CVE-2022-30225

Technical details about CVE-2022-30225 are not provided in the connected documents. Public information in the initial entry is limited to a generic vulnerability description; monitor for updates from official advisories.

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability

...

Sensitive Information Disclosure

Xen is vulnerable to Sensitive Information Disclosure. Linux block table does not zero memory regions before sharing with the backend, leading to information disclosure. Additionally, the grant table only shares 4k pages, leading to unrelated data from different backends residing in the same page...

PT-2022-3978 · Microsoft · Windows Media Player +1

Name of the Vulnerable Software and Affected Versions: Windows Media Player Network Sharing Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Media Player Network Sharing Service, which can be exploited to elevate...

KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...

CVE-2022-30225: Undefined Security Weakness

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability...

NextCloud Authorization Issues Vulnerability

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from an authorization issue vulnerability that stems from a lack of user account ownership checks...