Security Fix – Page 2 – TheCyberThrone

Google Patches Vulnerabilities in Chrome

Google rolled out new security update for Chrome, to address 20 vulnerabilities in the browser, including 16 reported by external researchers. 15 are rated high severity. Nearly half of them…

PravinKarthik December 7, 2021

Apache SSRF bug Exploited

Threat actors are exploiting a recently addressed server-side request forgery (SSRF) vulnerability, tracked as CVE-2021-40438, in Apache HTTP servers. This flaw can be exploited against httpd web servers that have…

PravinKarthik November 29, 2021

0Patch Releases Patch for Privilege Escalation Zero Day

0patch released free unofficial patches for Windows local privilege escalation zero-day (CVE-2021-24084) in Windows 10, version 1809 and later. The issue doesn’t impact Windows Servers because the vulnerable functionality in…

PravinKarthik November 28, 2021

VMware fixes SSRF Vulnerability

VMware has released security updates for vCenter Server after fixing arbitrary file read and SSRF vulnerabilities in the vSphere Web Client (FLEX/Flash). It's recommended that enterprises running vulnerable instances of…

PravinKarthik November 24, 2021

Cisco Bug could lead to DoS Condition in Firewall

A vulnerability in Cisco's firewall products that could be exploited to achieve denial of service. tracked as CVE-2021-34704 with a CVSSv3.0 score of 8.6, was found in the networking giant's Cisco Adaptive Security Appliance…

PravinKarthik November 23, 2021

ZOOM Fixes Path Traversal Flaws

Zoom has shipped patches for high severity vulnerabilities that expose enterprise users to remote code execution and command injection attacks with connection with Keybase connector client The network proxy page…

PravinKarthik November 13, 2021

Azure Virtual Desktop Bug Fix

Microsoft has fixed a bug blocking some Azure Virtual Desktop (AVD) devices from downloading and installing monthly security via WSUS since early July. The issue impacted both client (Windows 10…

PravinKarthik October 9, 2021

Apache Fixes In Wild Zero Day

The Apache Software Foundation has released a security patch to address a vulnerability in its HTTP Web Server project that has been actively exploited in the wild. Tracked as CVE-2021-41773,…

PravinKarthik October 6, 2021