Chrome 134 Released with Several Bug fixes

Google has released Chrome 134 to the stable channel, addressing 14 security vulnerabilities across its core components. These fixes include high-severity flaws that could lead to browser crashes, data leaks, or even arbitrary code execution. High-Severity Vulnerabilities CVE-2025-1914 – Out-of-Bounds Read in V8 JavaScript Engine Medium-Severity Vulnerabilities CVE-2025-1915 – Path Traversal in DevTools CVE-2025-1916 – […]

Chrome 134 Launches with Patches for 14 Crash-Inducing Vulnerabilities

itsecuritynews.info - 05/Mar 06:03

Google has rolled out Chrome 134 to the stable channel for Windows, macOS, and Linux, addressing 14 security vulnerabilities—including...

Cisco fixed command injection and DoS flaws in Nexus switches

securityaffairs.co - 28/Feb 11:59

Cisco addressed command injection and denial-of-service (DoS) vulnerabilities in some models of its Nexus switches. Cisco released security updates to...

GitLab Vulnerabilities Allow Attackers to Bypass Security and Run Arbitrary Scripts

itsecuritynews.info - 27/Feb 06:31

GitLab has urgently released security updates to address multiple high-severity vulnerabilities in its platform that could allow attackers to bypass...

VMware fixed three actively exploited zero-days in ESX products

securityaffairs.co - 04/Mar 23:39

Broadcom has addressed three VMware zero-day vulnerabilities in ESX products that are actively exploited in the wild. Broadcom released security...

LibreOffice Flaws Allow Attackers to Run Malicious Files on Windows

itsecuritynews.info - 27/Feb 06:04

A high-severity security vulnerability (CVE-2025-0514) in LibreOffice, the widely used open-source office suite, has been patched after researchers...

CVE-2025-24989 added to CISA KEV

thecyberthrone.in - 22/Feb 16:28

CVE-2025-24989 is a high security vulnerability that has been added to the Known Exploited Vulnerabilities (KEV) Catalog by the Cybersecurity and...

Google fixed two actively exploited Android flaws

securityaffairs.co - 04/Mar 13:28

Android March 2025 security update addresses over 40 vulnerabilities, including two flaws actively exploited in attacks in the wild. Android March...

CISA Warns of Oracle Agile Vulnerability Exploited in the Wild

itsecuritynews.info - 25/Feb 03:39

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory regarding CVE-2024-20953, a high-severity deserialization...

CISA KEV Catalog Update Part I – March 2025

thecyberthrone.in - 04/Mar 01:36

On March 3, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) updated its Known Exploited Vulnerabilities (KEV) catalog by adding...

CISA KEV Catalog update Part II – March 2025

thecyberthrone.in - 05/Mar 01:15

On March 4, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities (KEV) catalog, including...

Rubriques :