Do Son A security researcher has discovered that the Linux kernel is affected by a potentially serious vulnerability (CVE-2022-1516)
Vulnerability
a risk notice for the Linux kernel privilege escalation vulnerability. The vulnerability number is CVE-2022-1998, the bug level is moderate
Tr3ee has released proof-of-concept (PoC) exploit code for a Linux Kernel eBPF local privilege escalation (CVE-2022-23222)
containerd issued a risk notice for the containerd DoS vulnerability, which was tracked as CVE-2022-31030 with the CVSS score of 5.5
Linux kernel maintainers issued a risk notice for the Linux Kernel privilege escalation flaw, the vulnerability number is CVE-2022-32250
GitLab issued a security notice to fix an account takeover flaw (CVE-2022-1680) in the Gitlab Enterprise Edition, with a CVSS score of 9.9
Atlassian issued a risk notice for Confluence Server & Data Center. The vulnerability number is CVE-2022-26134
New zero-day CVE-2022-30190 vulnerability in Microsoft Office has been publicly revealed, allowing remote code execution on affected Windows
Linux kernel maintainers issued a risk notice for the Linux perf subsystem, the vulnerability number is CVE-2022-1729
The vulnerability is tracked as CVE-2022-1183 and has been issued a CVSS severity score of 7.0. It affects BIND versions 9.18.0 -> 9.18.2
Alibaba has issued a Fastjson risk notice remote code execution vulnerability which affects versions 1.2.80 and below.
In addition to Ubuntu, Tesla's vulnerabilities were also spotted by many hackers in the Pwn2Own Vancouver 2022 competition
Pwn2Own Vancouver 2022 hacking contest is currently underway, and products from companies including Microsoft, has all been defeated by hackers
Grafana issued a risk notice for Grafana Enterprise server-side request forgery vulnerability, the vulnerability number is CVE-2022-29170
Theori researchers have created a working PoC exploit for the recently patched CVE-2022-26717 vulnerability affecting Apple Safari product
Recently, security researchers have disclosed a vulnerability in the Huawei AppGallery, which mainly affects developers.
Nvidia has released the GeForce 473.47 WHQL driver, a security update in the form of a driver that fixes various CVE vulnerabilities
There is an out-of-bounds write issue (CVE-2022-22675) in the AppleAVD (a kernel extension for audio and video decoding)
Zyxel has released security updates for a critical vulnerability (CVE-2022-30525) affecting its business firewall and VPN products
Palo Alto Networks this week informed customers that it has patched a vulnerability (CVE-2022-0024) in Palo Alto Networks PAN-OS
Recently, the F5 issued a security bulletin, disclosing a remote code execution vulnerability (CVE-2022-1388) in F5 BIG-IP
Apache officially issued a risk notice for Apache CouchDB remote code execution vulnerability, the vulnerability number is CVE-2022-24706