Firefox, Chrome, Adobe, and VMware Patch Critical Security Flaws
Major tech companies release updates to fix serious security vulnerabilities.
1Critical Flaws in Firefox
Mozilla released an update addressing two critical security flaws in Firefox. These vulnerabilities were found in the JavaScript: WebAssembly and DOM: Navigation components. While exploit codes are publicly available, no active attacks have been detected yet.
2Ozone Issues in Chrome
Google patched 15 security flaws in Chrome, including two critical 'use-after-free' bugs in the Ozone layer. These vulnerabilities could be exploited via malicious HTML pages, particularly targeting Linux users.
3Adobe's Comprehensive Patch
Adobe addressed 88 security vulnerabilities across ColdFusion, Commerce, Experience Manager, and Illustrator. Among them were multiple critical flaws allowing arbitrary code execution, with some CVSS scores exceeding 9.0.
4Authentication Bypass in VMware
Broadcom fixed a critical authentication bypass flaw in VMware Avi Load Balancer. This vulnerability could allow a malicious user to access the Avi Control plane. The flaw was discovered and reported by NATO Cyber Security Centre.
5Active Exploitation Status
There is currently no evidence of active exploitation of these vulnerabilities. However, such flaws are often quickly weaponized by malware. Therefore, applying updates as soon as possible is strongly recommended.
6Importance for Organizations
These updates are particularly crucial for large organizations. Security vulnerabilities are frequently targeted by cyber attackers. Delaying updates can lead to severe data breaches and financial losses. Thus, upgrading to the latest versions is of critical importance.