Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
x86: shadow stack vs exceptions from emulation stubs - [XSA-451, CVE-2023-46841] (#2266326)
x86: shadow stack vs exceptions from emulation stubs - [XSA-451, CVE-2023-46841] (#2266326)
* bsc#1027519 * bsc#1218851 * bsc#1219080 * bsc#1219885
arm32: The cache may not be properly cleaned/invalidated (take two) [XSA-447, CVE-2023-46837] pci: phantom functions assigned to incorrect contexts [XSA-449, C…
* bsc#1218851 Cross-References: * CVE-2023-46839
* bsc#1218851 Cross-References: * CVE-2023-46839
* bsc#1218851 Cross-References: * CVE-2023-46839
* bsc#1218851 Cross-References: * CVE-2023-46839
* bsc#1218851 Cross-References: * CVE-2023-46839
Cybersecurity researchers have uncovered a new set of malicious packages published to the NuGet package manager using a lesser-known method for malware deploym…
arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320] (#2228238) ---- bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593] ---- x86/AMD:…
x86 shadow paging arbitrary pointer dereference [XSA-430, CVE-2022-42335]
3 security issues (#2180425) x86 shadow plus log-dirty mode use-after-free [XSA-427, CVE-2022-42332] x86/HVM pinned cache attributes mis-handling [XSA-428, CVE…
3 security issues (#2180425) x86 shadow plus log-dirty mode use-after-free [XSA-427, CVE-2022-42332] x86/HVM pinned cache attributes mis-handling [XSA-428, CVE…
x86: Cross-Thread Return Address Predictions [XSA-426, CVE-2022-27672]
An update that fixes 17 vulnerabilities is now available.
An update that fixes 21 vulnerabilities is now available.
An update that fixes 20 vulnerabilities is now available.
An update that fixes 20 vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
An update that solves two vulnerabilities and has four fixes is now available.
An update that solves 8 vulnerabilities and has one errata is now available.
insufficient TLB flush for x86 PV guests in shadow mode [XSA-408, CVE-2022-33745] ---- Retbleed - arbitrary speculative code execution with return instructions…
insufficient TLB flush for x86 PV guests in shadow mode [XSA-408, CVE-2022-33745]
