Flash Notices (15)

Flash Notice: RCE Vulnerability Found in Open-Source PDF Library Ghostscript

A critical remote code execution (RCE) vulnerability, tracked as CVE-2023-36664, has been discovered in Ghostscript, an open-source interpreter.

Flash Notice: Microsoft Zero-Day Exploited by Russian Threat Actor

A remote code execution (RCE) vulnerability exists in Microsoft Office and Windows HTML. The vulnerability is tracked as CVE-2023-36884.

Flash Notice: Patch NOW - Three New MOVEit Transfer Vulnerabilities

Three new vulnerabilities, tracked as CVE-2023-36934, CVE-2023-36932, and CVE-2023-36933, were found in Progress Software’s MOVEit File Transfer software.

Flash Notice: StackRot, a New Linux Kernel Vulnerability

A security vulnerability, tracked as CVE-2023-3269 or StackRot, has been discovered in the Linux kernel.

Flash Notice: Critical VMware Vulnerability Exploited in the Wild

A recently patched critical VMware vulnerability is now being exploited in the wild. CVE-2023-20887 is a command injection vulnerability.

Flash Notice: Critical Vulnerabilities Impact ASUS Routers

This week, ASUS issued a firmware update to address vulnerabilities across 19 of its wireless router models.

Flash Notice: Microsoft Patches High-Severity and Critical Vulnerabilities

This week, Microsoft released security updates for several vulnerabilities, honing in on four in particular

Flash Notice: UPDATE - Critical Fortinet Heap-Based Overflow RCE Vulnerability Patched

UPDATE (7/6) - A critical heap-based buffer overflow vulnerability (CVE-2023-27997) was found in Fortinet iOS and FortiProxy SSL-VPN.

Flash Notice: Google Patches Chrome Type Confusion Zero-Day Exploited by Attackers

A zero-day vulnerability (CVE-2023-3079) was found in Google’s Chrome web browser and is actively being exploited in the wild.

Flash Notice: SECOND UPDATE - Critical MOVEit File Transfer Zero-Day Vulnerability Exploited by Attackers

NEW UPDATE (6/16/2023) - Last night, Progress published an advisory notifying users of another critical MOVEit Transfer vulnerability: CVE-2023-35708.

Prev 13 14 15 16 17 Next