Hong Kong Computer Emergency Response Team Coordination Center

15 Oct 2021

Microsoft Edge Multiple Vulnerabilities

Multiple vulnerabilities were identified in Microsoft Edge, a remote attacker could exploit some of these vulnerabilities to trigger remote code execution, denial of service condition and security restriction bypass on the targeted system.

15 Oct 2021

Adobe Monthly Security Update (October 2021)

Adobe has released monthly security update for their products:   Vulnerable Product Risk Level Impacts Notes Details (including CVE) Adobe Acrobat and Reader Medium Risk Remote Code Execution Elevation of Privilege   APSB21-104 Adobe Connect Medium Risk...

15 Oct 2021

F5 BIG-IP Denial of Service Vulnerability

A vulnerability was identified in F5 BIG-IP, a remote attacker could exploit this vulnerability to trigger denial of service condition on the targeted system.   Note: No patch is currently available

15 Oct 2021

Microsoft Monthly Security Update (October 2021)

Microsoft has released monthly security update for their products:   Vulnerable Product Risk Level Impacts Notes Exchange Server Medium Risk Denial of Service Elevation of Privilege Spoofing Remote Code Execution   Windows High Risk Denial of Service Spoofing...

6 Oct 2021

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Mozilla Products, a remote attacker could exploit some of these vulnerabilities to trigger spoofing, remote code execution, denial of service condition, security restriction bypass and sensitive information disclosure on the targeted system.   [Updated on 2021-10-15]   ...

12 Oct 2021

LibreOffice Multiple Vulnerabilities

Multiple vulnerabilities were identified in LibreOffice, a remote attacker could exploit some vulnerabilities to trigger data manipulation on the targeted system.

12 Oct 2021

Apple Products Remote Code Execution Vulnerability

A vulnerability was identified in Apple Products, a remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.   Note: CVE-2021-30883 may have been actively exploited.

6 Oct 2021

Apache HTTP Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apache HTTP Server, a remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, information disclosure, security restriction bypass  and remote code execution on the targeted system.   HKCERT is aware of these vulnerabilities...

8 Oct 2021

Google Chrome Remote Code Execution Vulnerability

A vulnerability was identified in Google Chrome, a remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.

7 Oct 2021

Squid Products Security Restriction Bypass Vulnerability

A vulnerability was identified in Squid Products, a remote user could exploit this vulnerability to trigger bypass security restriction and denial of service condition on the targeted system.