#exploits

#exploits

Apache Flink CVE-2020-17519 allows unauthorized reading of local files, exploited in the wild, prompting urgent patches and checks for compromises. [ more ]

The study found that GPT-4 was the only model able to write viable exploits for a range of vulnerabilities. [ more ]

Microsoft fixed 149 security flaws on Patch Tuesday.

A vulnerability, CVE-2024-26234, was actively exploited with a backdoor in Windows. [ more ]

Researchers notified Microsoft of a rootkit vulnerability in Windows, but the patch took six months to be released.

A serious admin-to-kernel exploit in a driver associated with AppLocker was reported, allowing an attacker to control the kernel function. [ more ]

Microsoft fixed 73 security holes in February's Patch Tuesday, including two vulnerabilities that are actively being exploited.

One of the vulnerabilities allows for a bypass of security checks when a user clicks on a maliciously crafted shortcut file, while the other vulnerability allows for a bypass of Windows SmartScreen checks. [ more ]

Microsoft's November Patch Tuesday includes fixes for about 60 vulnerabilities, including three that have already been exploited in the wild.

The vulnerabilities include a Windows Desktop Manager elevation-of-privilege vulnerability, a privilege-escalation vulnerability in Windows Cloud Files Mini Filter Driver, and a vulnerability that allows bypassing Windows Defender SmartScreen.

These vulnerabilities are likely being exploited in conjunction with code execution bugs and users are advised to update quickly. [ more ]