Jun 12, 2024
0 new incidents, 2 with updates.
Updated
- ClosedHighPatched
Arm Mali GPU Kernel Driver Use-After-Free
Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory. Added to the CISA KEV catalog on 2024-06-12.
Arm Mali GPU Kernel DriverClosed Jun 12, 2024
- ClosedCriticalPatched
PHP-CGI argument injection on Windows (CVE-2024-4577)
A bypass of the old CVE-2012-1823 fix: on Windows, PHP's 'Best-Fit' character mapping let attackers inject arguments into PHP running in CGI mode (including default XAMPP setups) and execute code remotely. Found by Orange Tsai (DEVCORE) and fixed in PHP 8.3.8, 8.2.20 and 8.1.29. Exploitation, including by ransomware operators, followed within days. Added to the CISA KEV catalog on 2024-06-12. CISA lists known use in ransomware campaigns.
PHP Group PHPClosed Jun 12, 2024
