⚠ Serious Security: Microsoft Office 365 attacked over feeble encryption ⚠
📖 Read
via "Naked Security".
How 2022 is your encryption?📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 Fast Fashion Retailer Data Breach Draws $1.9M Fine 🕴
📖 Read
via "Dark Reading".
New York AG fines Shein and Romwe parent company for failure to protect customer data and downplaying the 2018 compromise of 46 million shopper records.📖 Read
via "Dark Reading".
Dark Reading
Fast Fashion Retailer Data Breach Draws $1.9M Fine
New York AG fines Shein and Romwe parent company for failure to protect customer data and downplaying the 2018 compromise of 46 million shopper records.
‼ CVE-2022-41307 ‼
📖 Read
via "National Vulnerability Database".
A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41306 ‼
📖 Read
via "National Vulnerability Database".
A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41586 ‼
📖 Read
via "National Vulnerability Database".
The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41582 ‼
📖 Read
via "National Vulnerability Database".
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38980 ‼
📖 Read
via "National Vulnerability Database".
The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39011 ‼
📖 Read
via "National Vulnerability Database".
The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access to the HISP module.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0699 ‼
📖 Read
via "National Vulnerability Database".
In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-242345178📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20464 ‼
📖 Read
via "National Vulnerability Database".
In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-236042696References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41600 ‼
📖 Read
via "National Vulnerability Database".
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39065 ‼
📖 Read
via "National Vulnerability Database".
A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÃ…DFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÃ…DFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score: 6.5 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H📖 Read
via "National Vulnerability Database".
‼ CVE-2021-22685 ‼
📖 Read
via "National Vulnerability Database".
An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41594 ‼
📖 Read
via "National Vulnerability Database".
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41578 ‼
📖 Read
via "National Vulnerability Database".
The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20397 ‼
📖 Read
via "National Vulnerability Database".
In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223086933References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41583 ‼
📖 Read
via "National Vulnerability Database".
The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41580 ‼
📖 Read
via "National Vulnerability Database".
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41593 ‼
📖 Read
via "National Vulnerability Database".
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41592 ‼
📖 Read
via "National Vulnerability Database".
The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of this vulnerability may affect the fingerprint service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41584 ‼
📖 Read
via "National Vulnerability Database".
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.📖 Read
via "National Vulnerability Database".