Kaspersky reports that highly targeted attacks are using Microsoft Windows and Chrome zero-days
3 years, 6 months ago

Kaspersky reports that highly targeted attacks are using Microsoft Windows and Chrome zero-days

Firstpost  

Experts at Kaspersky, earlier this year, had discovered several highly targeted attacks against multiple companies utilising a previously undiscovered chain of Microsoft Windows and Google Chrome zero-day exploits. The two exploited vulnerabilities in the Microsoft Windows OS kernel were Elevation of Privilege vulnerability CVE-2021-31956 and Information Disclosure vulnerability CVE-2021-31955. While Kaspersky researchers couldn’t retrieve remote execution code for the exploit, they suggested that attackers may have used CVE-2021-21224 vulnerability, related to a Type Mismatch bug in the V8. They also discovered and analysed the second exploit in the Microsoft Windows OS kernel which had two vulnerabilities.

Microsoft Patch Chrome Kaspersky Microsoft Windows Exploit Cve  kaspersky  kernel  exploit  attacks  microsoft  using  reports  used  highly  threat  targeted  security  windows  chrome  vulnerability  vulnerabilities  zerodays

History of this topic

Google fixes fifth –zero-day vulnerability in Chrome’s latest security update
7 months, 1 week ago

Google fixes fifth –zero-day vulnerability in Chrome’s latest security update

The Hindu  

Google released a security update for Chrome to fix a zero-day vulnerability. The security vulnerability was being exploited in the wild, and could result in data leakage, code execution and crashes in the software. The flaw can be misused to access data by other software or components and could result in data leakage, code execution and crashes in the software. …

Google fixes mulitple vulnerabilities in Android’s security update: Report
1 year, 2 months ago

Google fixes mulitple vulnerabilities in Android’s security update: Report

The Hindu  

Google released fixes for 54 unique vulnerabilities, including two known to have been actively exploited, in its Android security update. Of the 54 fixes concerning Android 11 through 13, five were rated critical, and two concerned remote code execution issues. The update from Google follows the standard system of releasing two patch levels, one that focuses on core Android components, …

Why users should update Google Chrome and Microsoft Edge browsers
1 year, 8 months ago

Why users should update Google Chrome and Microsoft Edge browsers

The Hindu  

A security bug detected in the V8 engine, used in processing JavaScript, of Chromium-based internet browsers could impact the security of users. Detected by Google’s Threat Analysis Group, the security bug could be used by cybercriminals to infect users’ devices without any active action on the part of the user and can be exploited by luring users to visit a …

Bug fixes this week | Vulnerabilities in Apple, Microsoft, Google, and Samsung products fixed
1 year, 10 months ago

Bug fixes this week | Vulnerabilities in Apple, Microsoft, Google, and Samsung products fixed

The Hindu  

The Indian Computer Emergency Response Team, released vulnerability notes for commonly used software detailing security bugs that could be exploited by cybercriminals to compromise the security of affected systems. The security bugs could be exploited by remote threat actors to gain elevated privileges and bypass security restrictions on targeted systems by escaping the browser’s sandbox, which is used to run …

Over 60 vulnerabilities detected in popular Microsoft products like Windows, Office among others
2 years, 3 months ago

Over 60 vulnerabilities detected in popular Microsoft products like Windows, Office among others

The Hindu  

CERT-In detected vulnerabilities in some of the most popular products of Microsoft including Windows, Office that could be exploited by hackers to steal sensitive information. The note stated that attackers could exploit these vulnerabilities to escalate privileges, execute arbitrary code, disclose sensitive information, bypass security restrictions and perform denial of services on targeted systems. In its blog on Wednesday, Cybersecurity …

Chrome for Windows and Mac getting an important security fix, Google says update now
2 years, 3 months ago

Chrome for Windows and Mac getting an important security fix, Google says update now

India Today  

Google is rolling out an important update for Google Chrome's desktop client to address a highly dangerous zero-day vulnerability. Google says the Chrome desktop app for Mac, Linux, and Windows has been updated to version 105.0.5195.102 to patch the 'CVE-2022-3075' vulnerability. Details about the bug remain unclear, and Google says the information will be made public until a majority of …

Google rolls security update for Chrome, fixes zero-day exploit in V8 JavaScript engine
3 years, 5 months ago

Google rolls security update for Chrome, fixes zero-day exploit in V8 JavaScript engine

Firstpost  

Google says that the Stable channel has been updated to 91.0.4472.164 for Windows, Mac and Linux which will roll out over the coming days/weeks. Google is rolling out a massive new update with security fixes for Chrome web browser. The update also includes a fix of the zero-day exploit in its V8 JavaScript engine. For the uninitiated, a zero-day exploit …

Chrome browser for Windows and Mac now receiving the latest update to patch new zero-day bug
3 years, 5 months ago

Chrome browser for Windows and Mac now receiving the latest update to patch new zero-day bug

India Today  

Google Chrome users are receiving a new security update that brings fixes for several issues with the browser. As pointed out by The Hacker News, this is the ninth zero-day vulnerability addressed by Google for its Chrome browser this year. Chrome users are suggested to update their browser to the latest version to avoid any exploitation of their data through …

Microsoft's February Patch Tuesday Update Fixes Windows Zero-Day Vulnerability, 56 Other Critical Bugs
3 years, 10 months ago

Microsoft's February Patch Tuesday Update Fixes Windows Zero-Day Vulnerability, 56 Other Critical Bugs

News 18  

Microsoft has released its monthly batch of security-update that addresses 56 security vulnerabilities, including a Windows bug that was out in the wild, without any detection. The zero-day exploit tracked as CVE-2021-1732 is said to be a ‘Windows Win32k Elevation of Privilege Vulnerability,’ meaning it allows an attacker or malicious programme to elevate their privileges to administrative privileges. The new …

Google Releases Chrome Update That Patches a Zero-Day Vulnerability
3 years, 10 months ago

Google Releases Chrome Update That Patches a Zero-Day Vulnerability

News 18  

Google has released version 88.0.4324.150 of its Google Chrome browser for Windows, Mac, and Linux. The latest update for Chrome comes with an important fix for a zero-day vulnerability that is said to have been exploited actively. The zero-day vulnerability, which was identified as ‘CVE-2021-21148’ was described as a “head overflow” memory corruption bug in the V8 JavaScript engine. Just …

Google patches two actively exploited Chrome zero-day bugs
4 years, 1 month ago

Google patches two actively exploited Chrome zero-day bugs

The Hindu  

Google on Wednesday released an update for Chrome to patch two zero-day vulnerabilities that were exploited in the wild. While the first three vulnerabilities were discovered by Google’s security research team, the recent two bugs came to Google’s knowledge through anonymous sources. “We would also like to thank all security researchers that worked with us during the development cycle to …

Google Chrome Getting a New Update That Fixes Two Critical Zero-Day Vulnerabilities
4 years, 1 month ago

Google Chrome Getting a New Update That Fixes Two Critical Zero-Day Vulnerabilities

News 18  

Google Chrome browser for Windows, Mac, and Linux is getting a new update that addresses two zero-day vulnerabilities discovered in the wild. Users can manually update the browser by heading to ‘more’ at the top right corner and then select update Google Chrome. Last week, Google addressed the second zero-day bug CVE-2020-16009 also residing in Chrome’s V8 JavaScript engine. The …

Google Chrome Gets Second Security Update in Two Weeks That Fixes a Critical Zero-Day Vulnerability
4 years, 1 month ago

Google Chrome Gets Second Security Update in Two Weeks That Fixes a Critical Zero-Day Vulnerability

News 18  

Google Chrome desktop browser is receiving a new security update that patches ten bugs with high-risk ratings. This is the second security update Google has released in the last two weeks that also addresses a zero-day vulnerability, identified as CVE-2020-16009 on the browser. The zero-day vulnerability was found to be affecting Google Chrome desktop application for Windows, Mac and Linux …

Google discloses new zero-day vulnerability in Windows OS
4 years, 1 month ago

Google discloses new zero-day vulnerability in Windows OS

The Hindu  

Google has revealed a zero-day vulnerability in the Windows operating system that lets hackers to exploit it actively. Zero-day vulnerability, a software security flaw that is known to the software vendor but doesn’t have a patch in place to fix the flaw, was discovered by Google’s Project Zero security researchers. According to Google, the zero-day bug in the Windows Kernel …

Discover Related