vulnerability - search results

Google Chrome has a series of vulnerabilities that the company is patching, including an Animation zero-day that is being exploited.

As part of January 2022 Patch Tuesday, Microsoft has fixed a flaw in HTTP Protocol Stack within Windows and Windows Server.

Cisco Talos has evaluated a POC for an exploit for the Windows Installer bug effecting Windows 11, Windows 10, and Windows Server.

A new flaw in Windows Registry on Windows 10 allows low privilege access, but it is unclear which PCs are affected.

A flaw in Microsoft Account authentication for forgotten passwords saw the researcher who discovered it get $50,000 from Microsoft.

The vulnerability assessment tool for Microsoft Defender for Endpoint on Windows is now coming to MacOS enterprise machines.

Microsoft says it sent out a patch last month for a problem found in the Xbox web portal, allowing attackers to access personal information.

Last week’s Patch Tuesday fixed the GlueBall Vulnerability in Windows 10, exactly two years after it was first reported to Microsoft.

The BootHole vulnerability effects Windows and Linux systems at a Secure Boot level, making it a critical flaw that could give wide system access to attackers.

A new Zoom vulnerability that opens Windows credentials comes days after the British Prime Minister sparked security concerns on the platform.

A bug in the Microsoft Azure portal's javascript parsing let security researchers steal the access tokens of an external organization. The tech giant managed to fix the issue before there were any public reports.

Admins are urged to apply the SMBv3 vulnerability patch right away to avoid a potential WannaCry-like crisis.

Microsoft’s Patch Tuesday accidentally leaked details of a bug in Server Message Block (SMB) that has been described as wormable.

Security firm Volexity has confirmed a Microsoft Exchange bug has been exploited by several groups associated with governments.

A WhatsApp Desktop vulnerability could allow attackers to access user system files if they click on a malicious link.

Google has found 5 vulnerabilities in Safari Intelligent Tracking Protection that could allow third parties to track browsers.

A WhatsApp vulnerability lets hackers cause a buffer overflow via specially crafted MP4 file, letting them perform an RCE or DoS attack/

A vulnerability in the Linux Sudo utility means bad actors could gains root-level permission and run dangerous commands.

A vulnerability in WhatsApp could allow attackers to introduce an RCE attack through sending infected GIF files.

A now-resolved LastPass vulnerability let attackers grab a username and password from the extensions cache when they visited a malicious site.