Read Time:24 Second

Posted by Security Explorations on Aug 13

Hello All,

There is an architectural / design issue of PlayReady, which can be
successfully exploited to gain access to license server by arbitrary
clients. The problem has its origin in flat certificate namespace /
reliance on a single root key in PlayReady along no auth at license
server end by default (deemed as no bug by Microsoft).

PlayReady client certificates encountered in Windows 10 / 11 and
CANAL+ STB device environments share a…

Read More

More Stories

mod_auth_openidc-2.4.16.11-1.fc41

FEDORA-2025-7d661758bd Packages in this update: mod_auth_openidc-2.4.16.11-1.fc41 Update description: REbase mod_auth_openidc-2.4.16.11 resolves CVE-2025-31492 - mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected...

mod_auth_openidc-2.4.16.11-1.fc40

FEDORA-2025-80600b51c5 Packages in this update: mod_auth_openidc-2.4.16.11-1.fc40 Update description: REbase mod_auth_openidc-2.4.16.11 resolves CVE-2025-31492 - mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected...