Patch/Configuration Management, Vulnerability Management

Chrome 16 includes 15 vulnerability fixes

December 14, 2011

Google on Tuesday released Chrome 16, which includes fixes for 15 security vulnerabilities, including six "high-risk" flaws, seven "medium" and two "low." As part of its bug bounty program, Google paid out $6,000 to researchers who reported holes fixed in the new version. The high-risk flaws relate to URL bar spoofing, "use-after-free" memory, an out-of-bounds write in the V8 JavaScript engine and a buffer overflow in PDF font handling. In addition, version 16, available for Windows, Mac OS X, and Linux, allows users to create multiple profiles on a single instance of Chrome.

Angela Moscaritolo

Vulnerability Management

Apple patches TCC bypass vulnerability

SC StaffDecember 19, 2024

The vulnerability, tracked as CVE-2024-44131, was discovered in the FileProvider component and has been fixed in iOS 18, iPadOS 18, and macOS Sequoia 15 through improved validation of symbolic links.

concept of leaky software, data with a tap sticking out.3d illustration

Data Security

Misconfiguration exposes Virtavo security cam user data

SC StaffDecember 18, 2024

Over 8.7 million records, many of which are duplicates, were discovered within the server, including user phone numbers, network information, device identifiers, performance metrics, and other personal details, according to Cybernews researchers.