The April 2025 Security Update Review

April 08, 2025 | Dustin Childs CONTINUE READING

CVE-2021-1497: Cisco HyperFlex HX Auth Handling Remote Command Execution

Blog post

CVE-2021-1497: Cisco HyperFlex HX Auth Handling Remote Command Execution

June 23, 2021
Cisco, HyperFlex, Research

ZDI-21-502: An Information Disclosure Bug in ISC BIND server

Blog post

ZDI-21-502: An Information Disclosure Bug in ISC BIND server

June 16, 2021
ISC BIND, Research

CVE-2021-31181: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability

Blog post

CVE-2021-31181: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability

June 02, 2021
Microsoft, SharePoint, Research

CVE-2021-22909- Digging into a Ubiquiti Firmware Update bug

Blog post

CVE-2021-22909- Digging into a Ubiquiti Firmware Update bug

May 25, 2021
Ubiquiti, Wireless, Research

CVE-2021-31166: A Wormable Code Execution Bug in HTTP.sys

Blog post

CVE-2021-31166: A Wormable Code Execution Bug in HTTP.sys

May 18, 2021
Microsoft, IIS, Research

CVE-2021-26900: Privilege Escalation Via a Use After Free Vulnerability In win32k

Blog post

CVE-2021-26900: Privilege Escalation Via a Use After Free Vulnerability In win32k

May 04, 2021
Windows, Research

Parallels Desktop RDPMC Hypercall Interface and Vulnerabilities

Blog post

Parallels Desktop RDPMC Hypercall Interface and Vulnerabilities

April 29, 2021
Parallels, Research

CVE-2021-20226: A Reference-Counting Bug in the Linux Kernel io_uring Subsystem

Blog post

CVE-2021-20226: A Reference-Counting Bug in the Linux Kernel io_uring Subsystem

April 22, 2021
Linux, Research

CVE-2021-25646: Getting Code Execution on Apache Druid

Blog post

CVE-2021-25646: Getting Code Execution on Apache Druid

March 29, 2021
Apache, Druid, Research

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

Blog post

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

March 17, 2021
SharePoint, Microsoft, Research