Jun 7, 2023
1 new incident, 1 with updates.
Started
- ClosedHighPatched
Google Chromium V8: Type Confusion (CVE-2023-3079)
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2023-06-07.
Google Chromium V8Closed Jun 7, 2023
Updated
- ClosedCriticalPatched
MOVEit Transfer zero-day: Cl0p mass data theft
Cl0p (Lace Tempest) exploited an unauthenticated SQL injection in Progress MOVEit Transfer as a zero-day, stealing files from thousands of organisations through their managed file transfer servers. Progress shipped three rounds of fixes in June 2023 as more SQL injection bugs were found.
Progress MOVEit TransferClosed Jun 16, 2023
