Cisco IOS Privilege Escalation Vulnerability – CVE-2023-20198
Cisco comes with a warning to its customers about an IOS XE devices of a critical vulnerability that has no patch and is actively being exploited in the wild. The…
Kubernetes fixes Privilege Escalation Vulnerability
Kubernetes has released a latest version that includes patches for security bugs that allow attackers to abuse the subPath property of YAML configuration files to execute malicious commands on Windows…
Microsoft Chromium Edge Privilege Escalation flaw : CVE-2023-36741
Microsoft has released an updated version of its Edge browser. The vulnerability is a privilege escalation bug tracked as CVE-2023-36741 with a CVSS Score of 8.3 affecting versions prior to…
Bad.Build Bug in Google Cloud
Researchers have discovered a vulnerability in Google Cloud Build enables attackers to tamper with and inject malware into images stored in Artifact Registry. The vulnerability dubbed as Bad.Build, when analyzing…
Microsoft Patch Tuesday – June 2023
Microsoft Patched 70 CVEs in its June Patch Tuesday Release, with six rated as critical, 62 rated as important, 1 rated as moderate and 1 rated as low. This month’s…
Cisco Fixes Secure Client Security Flaw
Cisco has fixed a high severity flaw, tracked as CVE-2023-20178 with a CVSS Score of 7.8, resides in Cisco Secure Client that can be exploited by low-privileged, authenticated, local attacker…
Cisco Patches Vulnerabilities in its SMB Products
Cisco has released patches to address security vulnerabilities in the web UI of certain Small Business Series Switches that could be exploited by an unauthenticated, remote attacker to execute arbitrary…
Privilege Escalation Bug in macOS and iOS
Researchers have shared their findings regarding six vulnerabilities on macOS and iOS and a new bug class. The new class of privilege escalation bugs is based on the ForcedEntry attack,…