Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-30480PUBLISHED: 2021-04-09
Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user interaction. An attacker must be within the same organization, or an external party who has been accepted as a contact. NOTE: this is specific to the Zoom Chat softw...
CVE-2021-21194PUBLISHED: 2021-04-09Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21195PUBLISHED: 2021-04-09Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21196PUBLISHED: 2021-04-09Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21197PUBLISHED: 2021-04-09Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
0 Comments
Tweet This
User Rank: Ninja
1/20/2018 | 3:38:54 PM
With emails, our prime assumption is that emails come from people, rather than from the programmed execution of code residing in a number of machines. Next is the assumption that the name in the "From:" header is that of the "person" or entity sending the email. Then we have the primal assumption that an email is an object, sealed by the sender, traveling directly from sender to recipient, its contents unobserved or altered.
It's not surprising that so many carry forward the assumptions from a traditional mail, metaphor. Many others know these technologies of digital networks, and social-engineering, well enough to exploit the vulnerabilities in the mechanisms and those who rely on them. Conscience brings some of these to help; lack of conscience brings others to a smorgasbord of opportunities to exploit our misconceptions about email.