Infosec: Security Alerts and Advisories

2022-5-11

GovCERT.HK - Security Alert (A22-05-06): Multiple Vulnerabilities in Google Chrome

Google released a security update to address multiple vulnerabilities in Google Chrome.

2022-5-11

GovCERT.HK - High Threat Security Alert (A22-05-05): Multiple Vulnerabilities in Microsoft Products (May 2022)

Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

2022-5-5

GovCERT.HK - Security Alert (A22-05-04): Vulnerability in F5 BIG-IP

F5 has published a security advisory to address a vulnerability in F5 devices.

2022-5-5

GovCERT.HK - Security Alert (A22-05-03): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-5-4

GovCERT.HK - Security Alert (A22-05-02): Multiple Vulnerabilities in Firefox

Mozilla has published the advisories (MFSA2022-16 and MFSA2022-17) to address multiple vulnerabilities in Firefox browser.

2022-5-3

GovCERT.HK - Security Alert (A22-05-01): Multiple Vulnerabilities in Android

Google has released Android Security Bulletin May 2022 to fix multiple security vulnerabilities in Android operating system.

2022-4-29

GovCERT.HK - Security Alert (A22-04-25): Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

2022-4-28

GovCERT.HK - Security Alert (A22-04-24): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-4-27

GovCERT.HK - Security Alert (A22-04-23): Multiple Vulnerabilities in Google Chrome

Google released a security update to address multiple vulnerabilities in Google Chrome.

2022-4-22

GovCERT.HK - Security Alert (A22-04-22): Multiple Vulnerabilities in Drupal

Drupal has released security advisories to address multiple vulnerabilities in the Drupal products.

2022-4-21

GovCERT.HK - Security Alert (A22-04-21): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-4-20

GovCERT.HK - High Threat Security Alert (A22-04-20): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2022)

Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

2022-4-19

GovCERT.HK - Security Alert (A22-04-19): Vulnerability in VMware Products

VMware has published a security advisory to address a vulnerability in VMware products.

2022-4-19

GovCERT.HK - High Threat Security Alert (A22-04-18): Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

2022-4-19

GovCERT.HK - High Threat Security Alert (A22-04-17): Vulnerability in Google Chrome

Google released a security update to address a vulnerability in Google Chrome.

2022-4-14

GovCERT.HK - Security Alert (A22-04-16): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-4-13

GovCERT.HK - Security Alert (A22-04-15): Multiple Vulnerabilities in Adobe Reader/Acrobat

Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

2022-4-13

GovCERT.HK - Security Alert (A22-04-14): Vulnerability in Apache Struts

Apache has released a security update to address a vulnerability in Apache Struts.

2022-4-13

GovCERT.HK - High Threat Security Alert (A22-04-13): Multiple Vulnerabilities in Microsoft Products (April 2022)

Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

2022-4-12

GovCERT.HK - Security Alert (A22-04-12): Multiple Vulnerabilities in Google Chrome

Google released a security update to address multiple vulnerabilities in Google Chrome.

2022-4-8

GovCERT.HK - Security Alert (A22-04-11): Vulnerability in Microsoft Edge (Chromium-based)

Microsoft released a security update to address the vulnerability in Microsoft Edge (Chromium-based).

2022-4-7

GovCERT.HK - Security Alert (A22-04-10): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-4-7

GovCERT.HK - High Threat Security Alert (A22-04-09): Multiple Vulnerabilities in VMware Products

VMware has published security advisories to address multiple vulnerabilities in VMware products.

2022-4-6

GovCERT.HK - Security Alert (A22-04-08): Multiple Vulnerabilities in Firefox

Mozilla has published the advisories (MFSA2022-13 and MFSA2022-14) to address multiple vulnerabilities in Firefox browser.

2022-4-6

GovCERT.HK - Security Alert (A22-04-07): Vulnerability in Google Chrome

Google released a security update to address a vulnerability in Google Chrome.

2022-4-6

GovCERT.HK - Security Alert (A22-04-06): Multiple Vulnerabilities in Android

Google has released Android Security Bulletin April 2022 to fix multiple security vulnerabilities in Android operating system.

2022-4-4

GovCERT.HK - Security Alert (A22-04-05): Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

2022-4-4

GovCERT.HK - High Threat Security Alert (A22-04-04): Vulnerability in VMware Products

VMware has published a security advisory to address the vulnerability in VMware products.

2022-4-1

GovCERT.HK - Security Alert (A22-04-03): Vulnerability in Pulse Secure Products

Pulse Secure has published a security advisory to address a vulnerability in Pulse Secure products.

2022-4-1

GovCERT.HK - High Threat Security Alert (A22-04-02): Vulnerability in Apple iOS and iPadOS

Apple has released iOS 15.4.1 and iPadOS 15.4.1 to fix the vulnerability in various Apple devices.

2022-4-1

GovCERT.HK - High Threat Security Alert (A22-04-01): Multiple Vulnerabilities in Spring Framework

Spring has released a security advisory to address multiple remote code execution vulnerabilities in Spring Framework.

2022-3-30

GovCERT.HK - Security Alert (A22-03-21): Vulnerability in VMware Products

VMware has published a security advisory to address a vulnerability in VMware products.

2022-3-30

GovCERT.HK - Security Alert (A22-03-20): Multiple Vulnerabilities in Google Chrome

Google released a security update to address multiple vulnerabilities in Google Chrome.

2022-3-28

GovCERT.HK - High Threat Security Alert (A22-03-19): Vulnerability in Microsoft Edge (Chromium-based)

Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

2022-3-28

GovCERT.HK - High Threat Security Alert (A22-03-18): Vulnerability in Google Chrome

Google released a security update to address a vulnerability in Google Chrome.

2022-3-25

GovCERT.HK - Security Alert (A22-03-17): Vulnerability in SonicWall Products

SonicWall has released a security advisory to address a buffer overflow vulnerability in SonicOS which is the operating system for SonicWall firewalls.

2022-3-22

GovCERT.HK - Security Alert (A22-03-16): Vulnerability in Drupal

Drupal has released a security advisory to address a vulnerability in the Guzzle library.

2022-3-18

GovCERT.HK - Security Alert (A22-03-15): Vulnerability in OpenSSL

OpenSSL has released 1.1.1n and 3.0.2 to fix the vulnerability in various versions of OpenSSL.

2022-3-18

GovCERT.HK - Security Alert (A22-03-14): Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

2022-3-17

GovCERT.HK - Security Alert (A22-03-13): Multiple Vulnerabilities in ISC BIND

ISC has released a security update to fix the vulnerabilities in BIND.

2022-3-17

GovCERT.HK - Security Alert (A22-03-12): Multiple Vulnerabilities in Drupal

Drupal has released a security advisory to address multiple vulnerabilities in the CKEditor library for WYSIWYG editing.

2022-3-16

GovCERT.HK - Security Alert (A22-03-11): Multiple Vulnerabilities in Google Chrome

Google released a security update to address multiple vulnerabilities in Google Chrome.

2022-3-15

GovCERT.HK - Security Alert (A22-03-10): Multiple Vulnerabilities in Apache HTTP Server

The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

2022-3-15

GovCERT.HK - Security Alert (A22-03-09): Multiple Vulnerabilities in Apple iOS and iPadOS

Apple has released iOS 15.4 and iPadOS 15.4 to fix the vulnerabilities in various Apple devices.

2022-3-9

GovCERT.HK - Security Alert (A22-03-08): Multiple Vulnerabilities in Firefox

Mozilla has published the advisories (MFSA2022-10 and MFSA2022-11) to address multiple vulnerabilities in Firefox browser.

2022-3-9

GovCERT.HK - High Threat Security Alert (A22-03-07): Multiple Vulnerabilities in Microsoft Products (March 2022)

Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

2022-3-8

GovCERT.HK - Security Alert (A22-03-06): Multiple Vulnerabilities in Android

Google has released Android Security Bulletin March 2022 to fix multiple security vulnerabilities in Android operating system.

2022-3-8

GovCERT.HK - High Threat Security Alert (A22-03-05): Vulnerability in Linux Operating Systems

A local privilege escalation vulnerability is found in the Linux kernel 5.8 or later.

2022-3-7

GovCERT.HK - High Threat Security Alert (A22-03-04): Multiple Vulnerabilities in Firefox

Mozilla has published the advisory (MFSA2022-09) to address multiple vulnerabilities in Firefox browser.

2022-3-4

GovCERT.HK - Security Alert (A22-03-03): Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

2022-3-3

GovCERT.HK - Security Alert (A22-03-02): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-3-2

GovCERT.HK - Security Alert (A22-03-01): Multiple Vulnerabilities in Google Chrome

Google released a security update to address multiple vulnerabilities in Google Chrome.

2022-2-24

GovCERT.HK - Security Alert (A22-02-11): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-2-17

GovCERT.HK - Security Alert (A22-02-10): Multiple Vulnerabilities in Drupal

Drupal has released security advisories to address multiple vulnerabilities in the Drupal products.

2022-2-17

GovCERT.HK - Security Alert (A22-02-09): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-2-17

GovCERT.HK - High Threat Security Alert (A22-02-08): Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

2022-2-16

GovCERT.HK - Security Alert (A22-02-07): Multiple Vulnerabilities in VMware Products

VMware has published a security advisory to address multiple vulnerabilities in VMware products.

2022-2-15

GovCERT.HK - High Threat Security Alert (A22-02-06): Multiple Vulnerabilities in Google Chrome

Google released a security update to address multiple vulnerabilities in Google Chrome.

2022-2-11

GovCERT.HK - Security Alert (A22-02-05): Vulnerability in Microsoft Edge (Chromium-based)

Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

2022-2-11

GovCERT.HK - High Threat Security Alert (A22-02-04): Vulnerability in Apple iOS and iPadOS

Apple has released iOS 15.3.1 and iPadOS 15.3.1 to fix the vulnerability in various Apple devices.

2022-2-9

GovCERT.HK - Security Alert (A22-02-03): Multiple Vulnerabilities in Firefox

Mozilla has published the advisories (MFSA2022-04 and MFSA2022-05) to address multiple vulnerabilities in Firefox browser.

2022-2-9

GovCERT.HK - High Threat Security Alert (A22-02-02): Multiple Vulnerabilities in Microsoft Products (February 2022)

Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

2022-2-8

GovCERT.HK - Security Alert (A22-02-01): Multiple Vulnerabilities in Android

Google has released Android Security Bulletin February 2022 to fix multiple security vulnerabilities in Android operating system.

2022-2-4

GovCERT.HK - Security Alert (A22-01-26): Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

2022-2-4

GovCERT.HK - Security Alert (A22-01-25): Multiple Vulnerabilities in Google Chrome

Google released a security update to address multiple vulnerabilities in Google Chrome.

2022-2-4

GovCERT.HK - High Threat Security Alert (A22-01-24): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-2-4

GovCERT.HK - High Threat Security Alert (A22-01-23): Multiple Vulnerabilities in Samba

Samba released security updates to address multiple vulnerabilities in Samba.

2022-1-27

GovCERT.HK - Security Alert (A22-01-22): Vulnerability in Apache Tomcat

Apache Software Foundation has released a security advisory to address a vulnerability in the Apache Tomcat.

2022-1-27

GovCERT.HK - High Threat Security Alert (A22-01-21): Multiple Vulnerabilities in Apple iOS and iPadOS

Apple has released iOS 15.3 and iPadOS 15.3 to fix the vulnerabilities in various Apple devices.

2022-1-27

GovCERT.HK - High Threat Security Alert (A22-01-20): Vulnerability in Linux Operating Systems

A vulnerability was found in a Linux system service called polkit which is installed by default in several Linux distributions.

2022-1-24

GovCERT.HK - Security Alert (A22-01-19): Vulnerability in SolarWinds Serv-U File Server

SolarWinds has released a security advisory to address an improper input validation vulnerability (CVE-2021-35247) in Serv-U File Server.

2022-1-24

GovCERT.HK - High Threat Security Alert (A22-01-18): Multiple Vulnerabilities in McAfee Agent

McAfee has released a security advisory to address multiple vulnerabilities in McAfee Agent for Windows

2022-1-24

GovCERT.HK - High Threat Security Alert (A22-01-17): Vulnerability in Microsoft Windows

Microsoft has released an out-of-band security update to address the vulnerability in the WinVerifyTrust function that handles Windows Authenticode signature verification for portable executable (PE) files.

2022-1-21

GovCERT.HK - Security Alert (A22-01-16): Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

2022-1-20

GovCERT.HK - Security Alert (A22-01-15): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-1-20

GovCERT.HK - Security Alert (A22-01-14) Multiple Vulnerabilities in Drupal

Drupal has released a security advisory to address multiple vulnerabilities in the jQuery UI library.

2022-1-20

GovCERT.HK - Security Alert (A22-01-13): Multiple Vulnerabilities in Google Chrome

Google released a security update to address multiple vulnerabilities in Google Chrome.

2022-1-19

GovCERT.HK - Security Alert (A22-01-12): Multiple Vulnerabilities in Oracle Java and Oracle Products (January 2022)

Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

2022-1-13

GovCERT.HK - Security Alert (A22-01-11): Multiple Vulnerabilities in Cisco Products

Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

2022-1-13

GovCERT.HK - Security Alert (A22-01-10): Vulnerability in Apple iOS and iPadOS

Apple has released iOS 15.2.1 and iPadOS 15.2.1 to fix the vulnerability in various Apple devices.

2022-1-12

GovCERT.HK - Security Alert (A22-01-09): Multiple Vulnerabilities in Adobe Reader/Acrobat

Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

2022-1-12

GovCERT.HK - Security Alert (A22-01-08): Multiple Vulnerabilities in Firefox

Mozilla has published the advisories (MFSA2022-01 and MFSA2022-02) to address multiple vulnerabilities in Firefox browser.

2022-1-12

GovCERT.HK - High Threat Security Alert (A22-01-07): Multiple Vulnerabilities in Microsoft Products (January 2022)

Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

2022-1-10

GovCERT.HK - High Threat Security Alert (A22-01-06): Vulnerability in H2 Database Console

H2 has released a security advisory to address a vulnerability in H2 database console.

2022-1-7

GovCERT.HK - Security Alert (A22-01-05): Multiple Vulnerabilities in Android

Google has released Android Security Bulletin January 2022 to fix multiple security vulnerabilities in Android operating system.

2022-1-7

GovCERT.HK - Security Alert (A22-01-04): Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

2022-1-6

GovCERT.HK - Security Alert (A22-01-03): Vulnerability in VMWare Products

VMware has published a security advisory to address a vulnerability in VMware products.

2022-1-5

GovCERT.HK - Security Alert (A22-01-02): Vulnerability in Apache Struts

Apache has released a security update to address a vulnerability in Apache Struts.

2022-1-5

GovCERT.HK - Security Alert (A22-01-01): Multiple Vulnerabilities in Google Chrome

Google released a security update to address multiple vulnerabilities in Google Chrome.