Hong Kong Computer Emergency Response Team Coordination Center

15 Sep 2021

Microsoft Monthly Security Update (September 2021)

Microsoft has released monthly security update for their products:   Note: Microsoft has released the patch to fix the vulnerability (CVE-2021-40444) in MSHTML component affecting Microsoft Windows in this update. The risk level of that vulnerability is previously rated as extremely...

20 Sep 2021

Linux Kernel Multiple Vulnerabilities

Multiple vulnerabilities were identified in Linux Kernel, a remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, sensitive information disclosure, elevation of privilege and security restriction bypass on the targeted system.

20 Sep 2021

Apache HTTP Server Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apache HTTP Server, a remote attacker could exploit some of these vulnerabilities to trigger denial of service, security restriction bypass, sensitive information disclosure and spoofing on the targeted system.

20 Sep 2021

OpenSSL Denial of Service Vulnerability

A vulnerability was identified in OpenSSL, a remote attacker could exploit some of these vulnerabilities to trigger denial of service condition.

16 Sep 2021

Apache Tomcat Denial of Service Vulnerability

A vulnerability has been identified in Apache Tomcat, a remote user can exploit this vulnerability to trigger denial of service condition on the targeted system.

16 Sep 2021

Drupal Multiple Vulnerabilities

Multiple vulnerabilities were identified in Drupal, a remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, cross-site scripting and security restriction bypass on the targeted system.

8 Sep 2021

Microsoft Windows Remote Code Execution Vulnerability

A vulnerability has been identified in Microsoft Windows, a remote user can exploit this vulnerability to trigger remote code execution on the targeted system.   This vulnerability impacts MSHTML, a component used in Office applications to render web-hosted content. The attacker can exploit this vulnerability...

16 Aug 2021

Microsoft Windows Remote Code Execution Vulnerability

A vulnerability has been identified in Microsoft Windows, a remote user can exploit this vulnerability to trigger remote code execution on the targeted system.   [Updated on 2021-09-16] Patch is currently available. The risk level is changed from high risk to...

15 Sep 2021

Adobe Monthly Security Update (September 2021)

Adobe has released monthly security update for their products:   Vulnerable Product Risk Level Impacts Notes Details (including CVE) Adobe XMP Toolkit SDK Medium Risk Information Disclosure   APSB21-85 Adobe Photoshop Medium Risk Remote Code Execution   ...

15 Sep 2021

Palo Alto PAN-OS Multiple vulnerabilities

Multiple vulnerabilities were identified in Palo Alto PAN-OS, a remote user could exploit some of these vulnerabilities to trigger cross site scripting, remote code execution and denial of service on the targeted system.