Oct 15, 2024
0 new incidents, 3 with updates.
Updated
- ClosedPatched
Mozilla Firefox Use-After-Free
Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process. Added to the CISA KEV catalog on 2024-10-15. CISA lists known use in ransomware campaigns.
Mozilla FirefoxClosed Oct 15, 2024
- ClosedPatched
SolarWinds Web Help Desk Hardcoded Credential
SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data. Added to the CISA KEV catalog on 2024-10-15.
SolarWinds Web Help DeskClosed Oct 15, 2024
- ClosedPatched
Microsoft Windows Kernel TOCTOU Race Condition
Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. Added to the CISA KEV catalog on 2024-10-15. CISA lists known use in ransomware campaigns.
Microsoft WindowsClosed Oct 15, 2024
