Plus: Google Chrome, Apple bugs also exploited in the wild
Happy May Patch Tuesday. We've got a lot of vendors joining this month's patchapalooza, which includes a handful of bugs that have been exploited — either in the wild or at Pwn2Own — and now fixed by Microsoft, Apple, Google and VMware.While Microsoft doesn't provide any detail about the scale and scope of the exploit, it was spotted by several bug hunters, which indicates that it's pretty widespread.
"They could also perform an HTTP-based server-side request forgery , and — most importantly — perform NLTM relaying as the SharePoint Farm service account,". It's a memory corruption flaw in RTKit that could be abused to bypass kernel memory protections by an attacker with arbitrary kernel read and write capability.
"A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host," VMware said. SAP security note #3448171 addresses another critical flaw, this one receiving a 9.6 CVSS score. It patches a file upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform.
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Microsoft, Google do a victory lap around passkeysWindows giant extends passwordless tech to everyone else
Read more »
Microsoft's FOMO after seeing Google AI drove investment in OpenAIHistorical email in antitrust case shows execs 'very, very worried' about capability gaps
Read more »
Kaiser Permanente shared 13.4M people's data with Microsoft Bing, Google, othersOuch!
Read more »
Google I/O is Google A/I as search biz goes all-in on AIChrome is getting an onboard artificial intelligence model that devs can query
Read more »
Encrypted mail service Proton hands suspect's personal info to cops againPlus: Google patches another Chrome security hole, and more
Read more »
Microsoft confirms more Xbox 360 sales are coming before July store closureMicrosoft has announced that more Xbox 360 sales are coming in the months before the Xbox 360 store and Marketplace is shut down in July.
Read more »