Google has released an emergency security update, which fixes a new Chrome zero-day security vulnerability. The new firmware is rolling out to users in the Stable and Extended stable channel.
Buffer overflow RSS
Today, Microsoft has issued important security fixes to address DoS vulnerabilities affecting .NET Core and Visual Studio. The patches are available via .NET 6.0.9 and .NET Core 3.1.29.
With Patch Tuesday recently, Microsoft released the KB5012170 update which adds new vulnerable UEFI signatures to the Secure Boot DBX. The newly added signatures are related to the GRUB vulnerability.
HP has issued a list of its printers that are vulnerable to a new "Critical" buffer overflow bug that can lead to exploitation. Fortunately, patched firmware for these models has also been released.
A report claims that WhatsApp has been the target of a surveillance attack developed by Israel-based security firm NSO Group. WhatsApp has confirmed the vulnerability and is still investigating.
An independent researcher has uncovered a problem with the Android and browser versions of WhatsApp. An attacker can send around 4,000 smileys to their target which causes the victim's app to crash.