Google - CVE CyberSecurity Database News (Page 36)

Dec 12, 2024 RCE Windows Microsoft Exploit Google

CVE-2024-49086 - Windows RRAS Remote Code Execution Explained with Demo and Fix Tips

The cybersecurity world just saw another serious Microsoft vulnerability, labeled CVE-2024-49086. This post breaks down what this Remote Code Execution (RCE) bug in Windows RRAS

Dec 12, 2024 Exploit Google Chrome

CVE-2024-12382 - Exploiting Use-After-Free in Chrome’s Translate – How Attackers Can Achieve Heap Corruption (With Code Example)

In April 2024, Google patched a high-severity bug in Chrome, tracked as CVE-2024-12382. This use-after-free vulnerability lurked within the browser’s translation subsystem, risking the

Dec 12, 2024 RCE Google Chrome

CVE-2024-12381 - Type Confusion in V8 Engines—How a Chrome Bug Opened the Door for Heap Attacks

In early June 2024, security researchers discovered a major vulnerability in the V8 JavaScript engine—used by Google Chrome and many Chromium-based browsers. Tracked as

Dec 9, 2024 WordPress Exploit Google

CVE-2023-47841 - How a "Missing Authorization" Flaw in Analytify (Up To 5.1.1) Opens the Door to Unauthorized Access

--- Introduction WordPress plugins bring features and convenience — but sometimes, new risks too. One such risk popped up in Analytify, a popular Google Analytics plugin,

Dec 9, 2024 WordPress API PHP Google

CVE-2023-32117 - Exploiting the Missing Authorization in SoftLab Integrate Google Drive (n/a - 1.1.99)

The digital world runs on cloud connectors, but sometimes, integration plugins forget to ask, “Are you allowed in?” That’s exactly what happened with CVE-2023-32117;