SEC Consult SA-20241009-0 :: Local Privilege Escalation via MSI installer in Palo Alto Networks GlobalProtect (CVE-2024-9473)

Read Time:7 Second

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Oct 09

<<< image/webp; name=”cmd.webp”: Unrecognized >>>

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This...

FEDORA-2024-db72f480e8 Packages in this update: firefox-131.0.2-1.fc40 Update description: New upstream version (131.0.2) Read More

It was discovered that EDK II did not check the buffer length in XHCI, which could lead to a stack...

FEDORA-2024-f109ae6fc7 Packages in this update: firefox-131.0.2-1.fc39 Update description: Updated to latest upstream (131.0.2) Read More

FEDORA-2024-d85494e836 Packages in this update: firefox-131.0.2-1.fc41 Update description: Updated to latest upstream (131.0.2) Read More

Fabian Vogt discovered that OATH Toolkit incorrectly handled file permissions. A remote attacker could possibly use this issue to overwrite...