Vulnerability
The latest Vulnerability coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft Issues Urgent Patch for Critical SharePoint Privilege Escalation Flaw
Microsoft SharePoint has been hit with a critical security flaw, CVE-2024-49068, which allows attackers to escalate privileges and gain unauthorized access to sensitive data. This vulnerability,...
CVE-2024-49059: Critical Microsoft Office Vulnerability Puts Users at Risk of Data Breaches
A newly discovered critical vulnerability in Microsoft Office (CVE-2024-49059) exposes millions of users to potential ransomware attacks and data breaches. This elevation of privilege flaw affects...
Critical Microsoft SCOM Vulnerability (CVE-2024-43594) Puts Enterprise Networks at Risk
A newly disclosed critical vulnerability in Microsoft System Center Operations Manager (SCOM) is putting enterprise networks at immediate risk, with attackers potentially gaining complete control...
Critical Vulnerabilities in Rockwell Arena Simulation Software Threaten Industrial Operations
A critical set of vulnerabilities has been uncovered in Rockwell Automation's Arena Simulation Software, threatening the integrity of industrial manufacturing, logistics, and supply chain operations...
Critical Vulnerabilities in Schneider Electric's EcoStruxure Foxboro DCS Pose National Security Risks
Industrial control systems form the backbone of modern critical infrastructure, silently managing everything from power grids to water treatment facilities—which makes the recent discovery of...
AutomationDirect C-More EA9 firmware flaws (CVSS 9.8) risk ICS compromise—patch to version 6.73 now.
The AutomationDirect C-More EA9 human-machine interface (HMI) software has been found to contain critical vulnerabilities that could allow attackers to execute arbitrary code, cause denial-of-service...
CISA Alert: Planet WGS-804HPT Switches Face 9.8-Rated Buffer Overflow, Admin Bypass Flaws
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding multiple critical vulnerabilities in Planet WGS-804HPT industrial Ethernet switches, which could allow...
CISA Adds New Vulnerabilities: Critical Security Risks for Windows Users
The Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its Known Exploited Vulnerabilities (KEV) catalog, adding several critical security flaws that specifically impact...
Patch Now: CISA Warns Three Critical Reyee OS Flaws Enable Full Network Takeover
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory regarding multiple high-risk vulnerabilities in Ruijie Networks' Reyee OS, posing significant threats...
CISA Warns of Critical Vulnerability in Open Automation Software (CVE-2024-11220): Patch Immediately
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a critical vulnerability in Open Automation Software (OAS) platforms that could allow attackers to...
CISA Warns of Critical Fuji Electric Tellus Lite V-Simulator Vulnerabilities: What You Need to Know
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding multiple critical vulnerabilities in Fuji Electric's Tellus Lite V-Simulator software, used widely in...