‼ CVE-2023-21797 ‼
📖 Read
via "National Vulnerability Database".
Microsoft ODBC Driver Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21794 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Edge (Chromium-based) Spoofing Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21812 ‼
📖 Read
via "National Vulnerability Database".
Windows Common Log File System Driver Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
♟️ Microsoft Patch Tuesday, February 2023 Edition ♟️
📖 Read
via "Krebs on Security".
Microsoft is sending the world a whole bunch of love today, in the form of patches to plug dozens of security holes in its Windows operating systems and other software. This year's special Valentine's Day Patch Tuesday includes fixes for a whopping three different "zero-day" vulnerabilities that are already being used in active attacks.📖 Read
via "Krebs on Security".
Krebs on Security
Microsoft Patch Tuesday, February 2023 Edition
Microsoft is sending the world a whole bunch of love today, in the form of patches to plug dozens of security holes in its Windows operating systems and other software. This year's special Valentine's Day Patch Tuesday includes fixes for…
⚠ Microsoft Patch Tuesday: 36 RCE bugs, 3 zero-days, 75 CVEs ⚠
📖 Read
via "Naked Security".
Lots of lovely patches for your Valentine's Day delight. Get 'em as soon as you can...📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 9 New Microsoft Bugs to Patch Now 🕴
📖 Read
via "Dark Reading".
78 new CVEs patched in this month's batch — nearly half of which are remotely executable and three of which attackers already are exploiting.📖 Read
via "Dark Reading".
Dark Reading
9 New Microsoft Bugs to Patch Now
78 new CVEs patched in this month's batch — nearly half of which are remotely executable and three of which attackers already are exploiting.
🕴 OT Network Security Myths Busted in a Pair of Hacks 🕴
📖 Read
via "Dark Reading".
How newly exposed security weaknesses in industrial wireless, cloud-based interfaces, and nested PLCs serve as a wake-up call for hardening the physical process control layer of the OT network.📖 Read
via "Dark Reading".
Dark Reading
OT Network Security Myths Busted in a Pair of Hacks
How newly exposed security weaknesses in industrial wireless, cloud-based interfaces, and nested PLCs serve as a wake-up call for hardening the physical process control layer of the OT network.
‼ CVE-2023-23618 ‼
📖 Read
via "National Vulnerability Database".
Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when `gitk` is run on Windows, it potentially runs executables from the current directory inadvertently, which can be exploited with some social engineering to trick users into running untrusted code. A patch is available in version 2.39.2. As a workaround, avoid using `gitk` (or Git GUI's "Visualize History" functionality) in clones of untrusted repositories.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21815 ‼
📖 Read
via "National Vulnerability Database".
Visual Studio Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22743 ‼
📖 Read
via "National Vulnerability Database".
Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, by carefully crafting DLL and putting into a subdirectory of a specific name living next to the Git for Windows installer, Windows can be tricked into side-loading said DLL. This potentially allows users with local write access to place malicious payloads in a location where automated upgrades might run the Git for Windows installer with elevation. Version 2.39.2 contains a patch for this issue. Some workarounds are available. Never leave untrusted files in the Downloads folder or its sub-folders before executing the Git for Windows installer, or move the installer into a different directory before executing it.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21823 ‼
📖 Read
via "National Vulnerability Database".
Windows Graphics Component Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21553 ‼
📖 Read
via "National Vulnerability Database".
Azure DevOps Server Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21566 ‼
📖 Read
via "National Vulnerability Database".
Visual Studio Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21778 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-21808 ‼
📖 Read
via "National Vulnerability Database".
.NET and Visual Studio Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25724 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-21567 ‼
📖 Read
via "National Vulnerability Database".
Visual Studio Denial of Service Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25723 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23381 ‼
📖 Read
via "National Vulnerability Database".
Visual Studio Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
🕴 Expel Tackles Cloud Threats With MDR for Kubernetes 🕴
📖 Read
via "Dark Reading".
The new managed detection and response platform simplifies cloud security for Kubernetes applications.📖 Read
via "Dark Reading".
Dark Reading
Expel Tackles Cloud Threats With MDR for Kubernetes
The new managed detection and response platform simplifies cloud security for Kubernetes applications.
‼ CVE-2023-20949 ‼
📖 Read
via "National Vulnerability Database".
In s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259323133References: N/A📖 Read
via "National Vulnerability Database".