🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
‼ CVE-2020-22674 ‼

An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isom_intern.c, which allows attackers to cause a denial of service (DoS) via a crafted input.

📖 Read

via "National Vulnerability Database".
‼ CVE-2020-22673 ‼

Memory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input.

📖 Read

via "National Vulnerability Database".
‼ CVE-2020-22677 ‼

An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.

📖 Read

via "National Vulnerability Database".
‼ CVE-2020-22675 ‼

An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.

📖 Read

via "National Vulnerability Database".
🕴 Former Director of IT and Cybersecurity for Warren Presidential Campaign Launches Personified 🕴

Founder and CEO Mike Marotti will lead experts in campaign security to help progressive politicians and organizations with cybersecurity and IT needs.

📖 Read

via "Dark Reading".
🕴 Microsoft Fixes Zero-Day Flaw in Win32 Driver 🕴

A previously known threat actor is using the flaw in a broad cyber-espionage campaign, security vendor warns.

📖 Read

via "Dark Reading".
‼ CVE-2021-20031 ‼

A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-3322 ‼

Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r-4mq3

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-3330 ‼

RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-of-bounds Write (CWE-787). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-3321 ‼

Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal. Zephyr versions >= >=2.4.0 contain Integer Overflow to Buffer Overflow (CWE-680). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w44j-66g7-xw99

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-3323 ‼

Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr. Zephyr versions >= >=2.4.0 contain Integer Underflow (Wrap or Wraparound) (CWE-191). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-89j6-qpxf-pfpc

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-41337 ‼

Active Directory Security Feature Bypass Vulnerability

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-41339 ‼

Microsoft DWM Core Library Elevation of Privilege Vulnerability

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-41334 ‼

Windows Desktop Bridge Elevation of Privilege Vulnerability

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-40464 ‼

Windows Nearby Sharing Elevation of Privilege Vulnerability

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-41343 ‼

Windows Fast FAT File System Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38662.

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-40486 ‼

Microsoft Word Remote Code Execution Vulnerability

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-40485 ‼

Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40471, CVE-2021-40473, CVE-2021-40474, CVE-2021-40479.

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-41336 ‼

Windows Kernel Information Disclosure Vulnerability

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-26441 ‼

Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40478, CVE-2021-40488, CVE-2021-40489, CVE-2021-41345.

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-41335 ‼

Windows Kernel Elevation of Privilege Vulnerability

📖 Read

via "National Vulnerability Database".