Mar 30, 2023

Started

• Closed✓Patched

  Fortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948)

  Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely. Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution. Added to CISA KEV on 2023-03-30.

  Fortra Cobalt Strike·Closed Mar 30, 2023·updated Mar 30, 2023

• Closed✓Patched

  Arm Mali Graphics Processing Unit (GPU): 2 exploited vulnerabilities (CVE-2022-22706, CVE-2022-38181)

  Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages. Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. Added to CISA KEV on 2023-03-30.

  Arm Mali Graphics Processing Unit (GPU)·Closed Mar 30, 2023·updated Mar 30, 2023

• Closed✓Patched

  Google Chromium Network Service: Use-After-Free (CVE-2022-3038)

  Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2023-03-30.

  Google Chromium Network Service·Closed Mar 30, 2023·updated Mar 30, 2023

• Closed✓Patched

  Linux Kernel: Use-After-Free (CVE-2023-0266)

  Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user. Added to CISA KEV on 2023-03-30.

  Linux Kernel·Closed Mar 30, 2023·updated Mar 30, 2023

Updated

• Closed✓Patched

  3CX DesktopApp supply-chain attack (trojanized signed builds)

  Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack.

  3CX DesktopApp (Electron)·Closed Apr 20, 2023·updated Apr 20, 2023