Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Nov 21, 2024

0 new incidents, 2 with updates.

Updated

  • ClosedPatched

    Apple Multiple Products: 2 actively exploited vulnerabilities

    CVE-2024-44308: Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution. CVE-2024-44309: Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack. Added to the CISA KEV catalog on 2024-11-21.

    Apple Multiple ProductsClosed Nov 21, 2024

  • ClosedPatched

    Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization

    Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure. Added to the CISA KEV catalog on 2024-11-21.

    Oracle Agile Product Lifecycle Management (PLM)Closed Nov 21, 2024