ZDI-24-1041: Google Chrome Updater DosDevices Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Google Chrome. An attacker must first obtain the ability to execute low-privileged code...
VMware ESXi Ransomware Attack (CVE-2024-37085)
What is the Attack?Threat actors are exploiting an authentication bypass vulnerability in ESXi hypervisors, known as CVE-2024-37085, to gain full administrative permissions on domain-joined ESXi...
xrdp-0.10.1-1.el9
FEDORA-EPEL-2024-94499c0981 Packages in this update: xrdp-0.10.1-1.el9 Update description: Release notes for xrdp v0.10.1 (2024/07/31) General announcements A clipboard bugfix included in this release is sponsored...
xrdp-0.10.1-1.fc40
FEDORA-2024-e142be4915 Packages in this update: xrdp-0.10.1-1.fc40 Update description: Release notes for xrdp v0.10.1 (2024/07/31) General announcements A clipboard bugfix included in this release is sponsored...
xrdp-0.10.1-1.fc39
FEDORA-2024-41c1bf8de6 Packages in this update: xrdp-0.10.1-1.fc39 Update description: Release notes for xrdp v0.10.1 (2024/07/31) General announcements A clipboard bugfix included in this release is sponsored...
xrdp-0.10.1-1.el8
FEDORA-EPEL-2024-2b876f90b2 Packages in this update: xrdp-0.10.1-1.el8 Update description: Release notes for xrdp v0.10.1 (2024/07/31) General announcements A clipboard bugfix included in this release is sponsored...
bind-9.18.28-2.fc40 bind-dyndb-ldap-11.10-29.fc40
FEDORA-2024-8af1780fdf Packages in this update: bind-9.18.28-2.fc40 bind-dyndb-ldap-11.10-29.fc40 Update description: Update to BIND 9.18.28 Security Fixes A malicious DNS client that sent many queries over TCP...
bind-9.18.28-2.fc41 bind-dyndb-ldap-11.10-30.fc41
FEDORA-2024-56ae6c2c7a Packages in this update: bind-9.18.28-2.fc41 bind-dyndb-ldap-11.10-30.fc41 Update description: update to 9.18.28 rhbz#2299467 Fixes CVE-2024-4076 Fixes CVE-2024-1975 Fixes CVE-2024-1737 Fixes CVE-2024-0760 Automatic update for bind-9.18.28-1.fc41....
USN-6939-1: Exim vulnerability
Phillip Szelat discovered that Exim misparses multiline MIME header filenames. A remote attacker could use this issue to bypass a MIME filename extension-blocking protection mechanism...
USN-6936-1: Apache Commons Collections vulnerability
It was discovered that Apache Commons Collections allowed serialization support for unsafe classes by default. A remote attacker could possibly use this issue to execute...