Threat Post
3 years, 11 months ago
Microsoft Patches ‘Dogwalk’ Zero-Day and 17 Critical Flaws
August Patch Tuesday tackles 121 CVEs, 17 critical bugs and one zero-day bug exploited in the wild.
Security news aggregator
Latest coverage for Critical Vulnerability
Critical vulnerabilities can let attackers bypass security controls, compromise systems, or steal data, requiring urgent risk assessment and remediation.
8
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
A critical vulnerability is a software or hardware flaw that allows attackers to execute highly damaging actions, such as remote code execution or privilege escalation, with little or no user interaction. These vulnerabilities often affect core system components or widely used services, making them attractive targets for exploitation. The severity rating "critical" indicates that successful exploitation can lead to full system compromise or significant operational disruption.
Security practitioners must prioritize identifying and patching critical vulnerabilities promptly to reduce exposure to automated attacks and wormable exploits. Effective mitigation includes applying vendor patches, deploying intrusion detection systems tuned for exploit patterns, and restricting network access to vulnerable services. Understanding the exploitability and impact scope of a critical vulnerability helps allocate resources efficiently and maintain system integrity under active threat conditions.
Volume over time
Weekly headline count for the current query.
Showing 8 most recent headlines
Filtered view
Threat Post
4 years, 1 month ago
Critical Flaws in Popular ICS Platform Can Trigger RCE
Cisco Talos discovered eight vulnerabilities in the Open Automation Software, two of them critical, that pose risk for critical infrastructure networks.
Threat Post
4 years, 1 month ago
Critical Vulnerability in Premium WordPress Themes Allows for Site Takeover
Privilege escalation flaw discovered in the Jupiter and JupiterX Core Plugin affects more than 90,000 sites.
Threat Post
4 years, 2 months ago
F5 Warns of Critical Bug Allowing Remote Code Execution in BIG-IP Systems
The vulnerability is 'critical' with a CVSS severity rating of 9.8 out of 10.
Threat Post
4 years, 2 months ago
Millions of Java Apps Remain Vulnerable to Log4Shell
Four months after the critical flaw was discovered, attackers have a massive attack surface from which they can exploit the flaw and take over systems, researchers found.
Threat Post
4 years, 4 months ago
Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March Patch Tuesday
The computing giant patched 71 security vulnerabilities in an uncharacteristically light scheduled update, including its first Xbox bug.
Threat Post
4 years, 5 months ago
New Critical RCE Bug Found in Adobe Commerce, Magento
Adobe updated its recent out-of-band security advisory to add another critical bug, while researchers put out a PoC for the one it emergency-fixed last weekend.
Threat Post
4 years, 5 months ago
No Critical Bugs for Microsoft February 2022 Patch Tuesday, 1 Zero-Day
This batch had zero critical CVEs, which is unheard of. Most (50) of the patches are labeled Important, so don't delay to apply the patches, security experts said.