The April 2025 Security Update Review

April 08, 2025 | Dustin Childs CONTINUE READING

CVE-2024-21115: An Oracle VirtualBox LPE Used to Win Pwn2Own

Blog post

CVE-2024-21115: An Oracle VirtualBox LPE Used to Win Pwn2Own

May 09, 2024
Pwn2Own, Oracle, VirtualBox

CVE-2024-2887: A Pwn2Own Winning Bug in Google Chrome

Blog post

CVE-2024-2887: A Pwn2Own Winning Bug in Google Chrome

May 02, 2024
Pwn2Own, Chrome, Edge

Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers

Blog post

Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers

August 02, 2023
Microsoft, Kernel, LPE

CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100

Blog post

CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100

April 20, 2023
Western Digital, Pwn2Own, Research

CVE-2022-23088: Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack

Blog post

CVE-2022-23088: Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack

June 16, 2022
FreeBSD, Kernel, Research

CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader

Blog post

CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader

October 21, 2021
Adobe, Research, Exploit

From Pwn2Own 2021: A New Attack Surface on Microsoft Exchange - ProxyShell!

Blog post

From Pwn2Own 2021: A New Attack Surface on Microsoft Exchange - ProxyShell!

August 18, 2021
Exchange, Pwn2Own, Research

CVE-2021-27077: Selecting Bitmaps into Mismatched Device Contexts

Blog post

CVE-2021-27077: Selecting Bitmaps into Mismatched Device Contexts

July 28, 2021
Microsoft, Windows, Research

CVE-2021-26900: Privilege Escalation Via a Use After Free Vulnerability In win32k

Blog post

CVE-2021-26900: Privilege Escalation Via a Use After Free Vulnerability In win32k

May 04, 2021
Windows, Research