Feb 6, 2025
5 new incidents, 0 with updates.
Started
- ClosedPatched
Microsoft Office Outlook: Outlook Improper Input Validation Vulnerability
Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode. Added to CISA KEV on 2025-02-06.
Microsoft Office OutlookClosed Feb 6, 2025
- ClosedCriticalNo patch yet
Sophos CyberoamOS: CyberoamOS (CROS) SQL Injection Vulnerability
CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely. Added to CISA KEV on 2025-02-06.
Sophos CyberoamOSClosed Feb 6, 2025
- ClosedPatched
Sophos XG Firewall: XG Firewall Buffer Overflow Vulnerability
Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature. Added to CISA KEV on 2025-02-06.
Sophos XG FirewallClosed Feb 6, 2025
- ClosedPatched
7-Zip: Mark of the Web Bypass Vulnerability
7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user. Added to CISA KEV on 2025-02-06.
7-ZipClosed Feb 6, 2025
- ClosedPatched
Audinate Dante Discovery: Dante Discovery Process Control Vulnerability
Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code. Added to CISA KEV on 2025-02-06.
Audinate Dante DiscoveryClosed Feb 6, 2025
