19 reportsPriority High
Multiple software vulnerabilities reported
Several critical vulnerabilities across major software products have been identified, with some reported to be actively exploited, posing risks to UK organisations' security.
First report Latest
What is going on
- A remote code execution vulnerability in Mozilla products was reported, with evidence of active exploitation.
- A buffer overflow vulnerability in D-Link routers was identified, affecting confidentiality, integrity, and availability.
- A use-after-free vulnerability in Apple WebKit was reported, with exploitation in the wild.
- An integer overflow vulnerability in the Linux kernel was disclosed, potentially allowing local privilege escalation.
- Multiple Apple products were found to have buffer overflow and use-after-free vulnerabilities, with reports of exploitation.
- What to watch: Further details on the extent of exploitation and the availability of patches could change the assessment of risk.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority MediumType VulnerabilityLead report
Mozilla Multiple Products Remote Code Execution Vulnerability
- Priority HighType Vulnerability
Apple Multiple Products Authentication Bypass Vulnerability
- Priority MediumType Vulnerability
D-Link Routers Buffer Overflow Vulnerability
- Priority MediumType Vulnerability
Apple Multiple Products Use-After-Free WebKit Vulnerability
- Priority MediumType Vulnerability
Linux Kernel Integer Overflow Vulnerability
- Priority MediumType Vulnerability
Apple Multiple Buffer Overflow Vulnerability
- Priority MediumType Vulnerability
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
- Priority MediumType Vulnerability
Apple iOS and iPadOS Use-After-Free Vulnerability
- Priority MediumType Vulnerability
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
- Priority MediumType Vulnerability
Apple Multiple products Use-After-Free Vulnerability
- Priority MediumType Vulnerability
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
- Priority MediumType Vulnerability
Hikvision Multiple Products Authentication Bypass Vulnerability
- Priority MediumType Vulnerability
Google Chromium V8 Memory Overflow Vulnerability
- Priority MediumType Vulnerability
Apple Multiple Products Buffer Overflow Vulnerability
- Priority MediumType Vulnerability
Apple Multiple Products Classic Buffer Overflow Vulnerability
- Priority MediumType Vulnerability
Apple Multiple Products Improper Locking Vulnerability
- Priority MediumType Vulnerability
Google Dawn Use-After-Free Vulnerability
- Priority MediumType Vulnerability
Adobe Acrobat Use-After-Free Vulnerability
- Priority LowType Research & news
OpenAI launches security products, tells orgs they’re doomed if they don’t use them

