5 reportsPriority Low
Vulnerabilities in Windows and Chrome
New vulnerabilities in Windows and Google Chrome could allow attackers to execute code or elevate privileges, posing risks to UK organisations using affected systems.
First report Latest
What is going on
- A vulnerability in the Windows USB Hub Driver allows privilege elevation through a physical attack.
- A heap-based buffer overflow in the Windows USB Audio Class driver could enable local privilege escalation.
- A flaw in Google Chrome on Windows prior to 156.0.8078.73 may allow remote code execution outside the sandbox.
- Another vulnerability in Google Chrome on Windows prior to 156.0.8078.73 could let attackers execute code inside the sandbox via a crafted HTML page.
- Research indicates that NetamLoader malware is targeting government Windows 10 systems in Asia using .NET injection.
- What to watch: Confirm if any affected systems are present in your estate and monitor for signs of exploitation.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType Research & newsLead report
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
- Priority LowType Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally
- Priority LowType Vulnerability
Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
- Priority LowType Vulnerability
Input Validation Flaw in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
- Priority LowType Vulnerability
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack