vulnerabilities
Redmond pushes fixes for 117 vulnerabilities, three rated critical, five as publicly known , and eight marked as “exploitation more likely.” Beyond Microsoft, there are...
“We have been working on fixes for the last three weeks and hope to have them available soon. We are removing support for the old CUPS browse protocol completely”
Some 300,000 endpoints may be publicly exposed to RCE, but these are likely to be largely desktops not servers.
An attacker would need to craft a malicious container and run it "either directly (for example in services allowing shared GPU resources) or indirectly through a supply chain or social engineering attack"
Still a hit with hackers after all these months
net group “ESX Admins” username /domain /add.
CVE-2024-4879 (CVSS 9.8) lets “an unauthenticated user remotely execute code” -- ServiceNow swiftly pushed fix to hosted instances but those self-hosting must...
Cisco says 42 products confirmed exposed to CVE-2024-6387 -- but OpenSSH exploit is malicious: Beware bogus POCs says Kaspersky