Hong Kong Computer Emergency Response Team Coordination Center

9 Feb 2023

OpenSSL Multiple Vulnerabilities

Multiple vulnerabilities were identified in OpenSSL. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure and security restriction bypass on the targeted system.

8 Feb 2023

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, privilege escalation,  security restriction bypass, denial of service and sensitive information disclosure on the targeted system.

7 Feb 2023

SUSE Linux Kernel Multiple Vulnerabilities

Multiple vulnerabilities were identified in SUSE Linux. A attacker could exploit some of these vulnerabilities to trigger denial of service condition and elevation of privilege on the targeted system.   [Updated on 2023-02-08]  Updated System / Technologies affected, Solutions, Vulnerability Identifier and...

7 Feb 2023

IBM MQ Denial of Service Vulnerability

A vulnerability has been identified in IBM MQ. A remote user can exploit this vulnerability to trigger denial of service condition on the targeted system.

7 Feb 2023

Android Multiple Vulnerabilities

Multiple vulnerabilities were identified in Android. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege and sensitive information disclosure on the targeted system.

7 Feb 2023

ChromeOS Multiple Vulnerabilities

Multiple vulnerabilities were identified in ChromeOS. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and remote code execution on the targeted system.

7 Feb 2023

OpenSSH Multiple Vulnerabilities

Multiple vulnerabilities were identified in OpenSSH. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and remote code execution on the targeted system.

6 Feb 2023

Microsoft Edge Data Manipulation Vulnerability

A vulnerability was identified in Microsoft Edge. A remote attacker could exploit this vulnerability to trigger data manipulation on the targeted system.   Note: Proof Of Concept Exploit Code is Publicly Available for CVE-2023-21720.

3 Feb 2023

F5 Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in F5 Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service and remote code execution on the targeted system.  

12 Oct 2022

Microsoft Monthly Security Update (October 2022)

Microsoft has released monthly security update for their products:   Vulnerable Product Risk Level Impacts Notes Windows High Risk Remote Code Execution Denial of Service Spoofing Elevation of Privilege Information Disclosure Security Restriction Bypass CVE-2022-...