πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2022-41114 β€Ό

Windows Bind Filter Driver Elevation of Privilege Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31687 β€Ό

VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-26360 β€Ό

An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processorÒ€ℒs encrypted memory contents which may lead to arbitrary code execution in ASP.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31688 β€Ό

VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41054 β€Ό

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-39879 β€Ό

Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant permission for accessing information with phone uid.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41048 β€Ό

Microsoft ODBC Driver Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41047.

πŸ“– Read

via "National Vulnerability Database".
πŸ‘1
β€Ό CVE-2022-41085 β€Ό

Azure CycleCloud Elevation of Privilege Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41063 β€Ό

Microsoft Excel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41106.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41050 β€Ό

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-39885 β€Ό

Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44550 β€Ό

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41101 β€Ό

Windows Overlay Filter Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-41102.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41118 β€Ό

Windows Scripting Languages Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41128.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41086 β€Ό

Windows Group Policy Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-37992.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41092 β€Ό

Windows Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-41109.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-44549 β€Ό

The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41078 β€Ό

Microsoft Exchange Server Spoofing Vulnerability. This CVE ID is unique from CVE-2022-41079.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41088 β€Ό

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-41039, CVE-2022-41044.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-41098 β€Ό

Windows GDI+ Information Disclosure Vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-39890 β€Ό

Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information.

πŸ“– Read

via "National Vulnerability Database".