Microsoft Patch Tuesday – October 2023
Microsoft addresses 103 CVEs with 12 rated as critical and 91 rated as important and including two vulnerabilities that were exploited in the wild. This month’s update includes patches for:…
Qualcomm fixes Zero Day Vulnerabilities
Qualcomm and Arm have been forced to release security updates to patch several zero-day vulnerabilities exploited in recent targeted attacks against their chips. The four vulnerabilities are: CVE-2023-33106: A use-after-free…
QNAP Fixes multiple Vulnerabilities in its product
QNAP has warned customers to install firmware updates that fix five security vulnerabilities affecting its NAS devices. These vulnerabilities could allow attackers to execute commands, launch denial-of-service attacks. CVE-2023-23362 :…
Microsoft Fixes Several Vulnerabilities on Chromium Edge Browser
Microsoft has patched three security vulnerabilities in Microsoft Edge (Chromium-based) that could allow attackers to spoof websites, gain elevated privileges on the system, or even escape the browser sandbox. Microsoft…
VMware Fixes Aria Bugs CVE-2023-34039 & CVE-2023-20890
VMware has released security patches to address two critical vulnerabilities in Aria Operations for Networks. The vulnerabilities could allow attackers to bypass authentication and gain remote code execution on unpatched…
Ivanti Avalanche fixes Several Vulnerabilities
Ivanti Avalanche has been reported with several vulnerabilities that include arbitrary file upload remote code execution, authentication bypass, buffer overflow, and directory traversal remote code execution. CVE-2023-32560:Unauthenticated Stack-based Buffer Overflows…
Microsoft Patch Tuesday August 2023
Microsoft patched 73 CVEs in its August Patch Tuesday release, with six rated as critical and 67 rated as important. Microsoft also released two advisories (ADV230003 and ADV230004) this month…
Apache OpenMeetings Vulnerabilities
Researcher discovered three vulnerabilities in the open source Web application Apache OpenMeetings application can be used together into an attack chain that allows threat actors to take over a user…