8 reportsPriority Medium
Out-of-bounds write vulnerabilities reported
Multiple out-of-bounds write vulnerabilities have been disclosed with reports of active exploitation, affecting various software and hardware systems used by UK organisations.
First report Latest
What is going on
- An out-of-bounds write vulnerability in Samsung Mobile Devices was reported with evidence of exploitation in the wild.
- A separate out-of-bounds write vulnerability in WatchGuard Firebox was also reported with active exploitation.
- Broadcom VMware vCenter Server was found to have an out-of-bounds write vulnerability that is being exploited.
- Google Skia and Google Chromium V8 were each found to have related memory safety issues with reports of exploitation.
- Citrix NetScaler was reported to have an out-of-bounds read vulnerability that is being exploited.
- A new out-of-bounds read vulnerability in Windows Paint was reported with potential for remote code execution.
- What to watch: Further confirmation of exploitation attempts against the newly disclosed Windows Paint vulnerability would indicate expanding threat activity.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority MediumType VulnerabilityLead report
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
- Priority MediumType Vulnerability
Google Skia Out-of-Bounds Write Vulnerability
- Priority MediumType Vulnerability
Google Chromium V8 Memory Overflow Vulnerability
- Priority MediumType Vulnerability
Citrix NetScaler Out-of-Bounds Read Vulnerability
- Priority MediumType Vulnerability
WatchGuard Firebox Out of Bounds Write Vulnerability
- Priority MediumType Vulnerability
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- Priority LowType Vulnerability
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network
- Priority LowType Research & news
IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It