Read Time:10 Second
Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
Monthly Archives: July 2023
CVE-2021-4318
Read Time:9 Second
Object corruption in Blink in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2021-4317
Read Time:10 Second
Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVE-2021-4316
Read Time:9 Second
Inappropriate implementation in Cast UI in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to spoof browser UI via a crafted HTML page. (Chromium security severity: Low)
Friday Squid Blogging: Zaqistan Flag
UK MoD Error Sends Emails to Russia’s Ally Instead of US
Read Time:5 Second
The MoD clarified that the incident involved fewer than 20 emails and none were top secret
New Study Reveals Forged Certificate Attack Risks
Read Time:3 Second
Attempts can lead to unauthorized access to important company resources
40% of Ubuntu Cloud Workloads Vulnerable to Exploits
Read Time:4 Second
Wiz Research said the vulnerabilities were discovered in the Linux filesystem, OverlayFS
Microsoft Accused of Negligence in Recent Email Compromise
Read Time:7 Second
In an open letter, Senator Ron Wyden urged federal agencies to investigate Microsoft following a Chinese campaign that compromised US government emails
USN-6261-1: Linux kernel (IoT) vulnerabilities
Read Time:55 Second
It was discovered that the IP-VLAN network driver for the Linux kernel did
not properly initialize memory in some situations, leading to an out-of-
bounds write vulnerability. An attacker could use this to cause a denial of
service (system crash) or possibly execute arbitrary code. (CVE-2023-3090)
Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in
the Ubuntu Linux kernel did not properly perform permission checks in
certain situations. A local attacker could possibly use this to gain
elevated privileges. (CVE-2023-32629)
It was discovered that the netfilter subsystem in the Linux kernel did not
properly handle some error conditions, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-3390)
Tanguy Dubroca discovered that the netfilter subsystem in the Linux kernel
did not properly handle certain pointer data type, leading to an out-of-
bounds write vulnerability. A privileged attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2023-35001)