Collaborate Disseminate
White House calls for the “timely, complete, and consistent” publication of CVE and CWE data to help solve the security metrics problem.
The post US Gov Says Software Measurability is ‘Hardest Problem to Solve’ appeared first on SecurityWeek.
Continue reading US Gov Says Software Measurability is ‘Hardest Problem to Solve’
Patch Tuesday: Adobe patches six security flaws in the Substance 3D Stager product and warned of code execution risks on Windows and macOS.
The post Adobe Patches Code Execution Flaws in Substance 3D Stager appeared first on SecurityWeek.
Continue reading Adobe Patches Code Execution Flaws in Substance 3D Stager
Flaw poses a direct threat to the SOCKS5 proxy handshake process in cURL and can be exploited remotely in some non-standard configurations.
The post Critical SOCKS5 Vulnerability in cURL Puts Enterprise Systems at Risk appeared first on SecurityWeek.
Continue reading Critical SOCKS5 Vulnerability in cURL Puts Enterprise Systems at Risk
The release of Firefox 73 fixed high-severity memory safety bugs that could cause arbitrary code execution and missing bounds check that could enable memory corruption. Continue reading Mozilla Firefox 73 Browser Update Fixes High-Severity RCE Bugs
Microsoft is pressing ahead with an ambitious plan to de-fang common vulnerabilities hiding in old Windows code with the help of Rust. Continue reading Microsoft looks to Rust language to beat memory vulnerabilities
Microsoft is pressing ahead with an ambitious plan to de-fang common vulnerabilities hiding in old Windows code with the help of Rust. Continue reading Microsoft looks to Rust language to beat memory vulnerabilities
Flaws in Das U-Boot affect third-party hardware that uses the universal bootloader as an underlying component. Continue reading Amazon Kindle, Embedded Devices Open to Code-Execution
Researchers exploit a SQLite memory corruption issue outside of a browser. Continue reading DEF CON 2019: New Class of SQLite Exploits Open Door to iPhone Hack
Microsoft January Patch Tuesday roundup includes four critical patches for its Edge browser. Continue reading Microsoft Issues Multiple Critical Patches for Edge Browser
Texas Instruments Microcontrollers CC2640 and CC2650 are vulnerable to heap overflow Continue reading VU#317277: Texas Instruments Microcontrollers CC2640 and CC2650 are vulnerable to heap overflow