Week in review: 17 free AWS cybersecurity courses, exploited Chrome zero-day
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-26369 | Out-of-Bounds Write RCE in Adobe Acrobat and Reader via Malicious PDFs | 7.8 | 7% | KEV | KEV |
| CVE-2023-36761 | Information Disclosure Flaw in Microsoft Word Actively Exploited (CVE-2023-36761) | 6.5 | 20% | KEV | KEV |
| CVE-2023-36802 | Use-After-Free Privilege Escalation in Microsoft Streaming Service Proxy | 7.8 | 28% | KEV | KEV |
| CVE-2023-4863 | Out-of-Bounds Write in Google Chromium WebP Image Codec Actively Exploited | 8.8 | 100% | KEVPoC ×4 | KEV |
From the original article
4 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: In this Help Net Security interview, Adrien Petit, CEO at Uncovery, discusses the benefits that organizations can derive from implementing external attack surface management (EASM) solutions, the essential capabilities an EASM solution should possess, and how it deals with uncovering hidden systems.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.