Benoît Sevens

يفشل Microsoft Office Outlook في تحذير المستخدمين عند القيام بإجراءات غير آمنة محتملة، مما يسمح لمهاجم غير مصرح له بتنفيذ عملية انتحال (spoofing) عبر الشبكة. يمكن للمهاجم استغلال ذلك عن طريق إرسال ملف رسالة مصمم خصيصاً وإقناع المستخدم بفتحه. عند الفتح، يتصل Outlook بموقع شبكة يتحكم فيه المهاجم دون إظهار تحذير المحتوى الخارجي المعتاد. يمكن أن يؤدي هذا الاتصال إلى تسريب معلومات المصادقة، وتحديداً هاشات مصادقة NTLMv2، والتي يمكن للمهاجم استخدامها لانتحال شخصية المستخدم. تم استغلال هذه الثغرة بنشاط في حوادث واقعية.

تتأثر متصفحات Google Chrome وMicrosoft Edge وOpera وOpera GX بثغرة أمنية من نوع «صفر يوم» ذات خطورة عالية (CVE-2025-5419) في محرك JavaScript V8. هذه الثغرة الأمنية عبارة عن خطأ في القراءة والكتابة خارج الحدود يسمح لمهاجم عن بُعد بتنفيذ تعليمات برمجية عشوائية، مما يؤدي إلى تلف الـ«هيوب» (heap) من خلال صفحة HTML مصممة خصيصًا لهذا الغرض. ويجري استغلال هذه الثغرة بشكل نشط في الواقع. يمكن للمهاجمين استغلال هذا الخطأ عن طريق جذب الضحايا إلى مواقع ويب ضارة. تؤثر هذه الثغرة الأمنية على محرك JavaScript وWebAssembly V8.

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: نظام Windows الفرعي لنظام Linux (الإصدارات المتأثرة غير محددة) الوصف: تتعلق المشكلة بـ«إلغاء مرجعية مؤشر» غير موثوق به، مما يسمح لمهاجم غير مصرح له بتنفيذ تعليمات برمجية محليًّا. التوصيات: حتى الآن، لا توجد معلومات عن إصدار أحدث يحتوي على تصحيح لهذه الثغرة الأمنية.

The issue concerns a potential out-of-bounds access in the Linux kernel's ALSA: usb-audio component, specifically affecting Extigy and Mbox devices. A malicious device can provide a `bNumConfigurations` value that exceeds the initial allocation for `dev->config`, leading to out-of-bounds accesses later, for example, in `usb destroy configuration`.

The issue is related to a cookie management problem that has been addressed with improved state management. Processing maliciously crafted web content may lead to a cross-site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

The issue was addressed with improved checks. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

The vulnerability is related to out-of-bounds reads in the Linux kernel's USB Audio driver. The current USB-audio driver code does not check the bLength of each descriptor when traversing for clock descriptors, which can lead to out-of-bounds reads if a device provides a bogus descriptor with a shorter bLength. This issue can be exploited by an attacker with physical access to the system, allowing them to gain additional access by reading arbitrary system memory. The vulnerability can also lead to local information disclosure with no additional execution privileges needed.

The issue is related to a possible leak of kernel memory contents to a USB HID due to uninitialized data in the Linux kernel. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. The vulnerability has been resolved by zero-initializing the report buffer in the Linux kernel. It is also mentioned that this vulnerability was actively exploited, including by Serbian authorities to unlock confiscated devices via an exploit chain developed by Cellebrite.

The issue is related to an integer overflow in the Skia graphics library of Google Chrome, allowing a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a malicious file. The severity of this issue is high. It has been reported that an exploit for this issue exists in the wild and has been actively exploited by hackers. Google has released an emergency security update to address this zero-day vulnerability.

The issue is related to a security feature bypass vulnerability in Microsoft Windows SmartScreen. This vulnerability can be exploited by an attacker to bypass security restrictions by loading specially crafted malicious files. The vulnerability is associated with errors in security settings. There have been real-world incidents where this issue was exploited, including its use by Magniber ransomware actors.

The issue is related to a remote code execution vulnerability in the Windows Scripting Languages. It allows remote attackers to execute arbitrary code and affect the system. The vulnerability was exploited by North Korean hackers, known as APT37, in targeted attacks on South Korean neighbors. The attack was implemented by embedding malicious software in documents referencing a recent mass incident in Itaewon, Seoul. The vulnerability was used to deliver malicious software or execute arbitrary code when displaying a website controlled by an attacker. The estimated number of potentially affected devices is not specified.