May 28, 2024
2 new incidents, 0 with updates.
Started
- ClosedPatched
Check Point VPN gateway arbitrary file read (CVE-2024-24919) exploited
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances. Added to the CISA KEV catalog on 2024-05-30. CISA lists known use in ransomware campaigns.
Check Point Quantum Security GatewaysClosed May 30, 2024
- ClosedPatched
Google Chromium V8 Type Confusion
Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-05-28.
Google Chromium V8Closed May 28, 2024
