Advisories
The latest information on known vulnerabilities in popular software and systems
See All
Advisories
Blog Posts
Case Studies
Spotlights
Newsletters
CIS Benchmarks
Podcasts
Press Releases
Webinars
White Papers
1 - 10 of 216 results
2024-060: A Vulnerability in GitHub Enterprise Server (GHES) Could Allow for Authentication Bypass
Issued on 05.23.2024
2024-060: A Vulnerability in GitHub Enterprise Server (GHES) Could Allow for Authentication Bypass
A vulnerability has been discovered in GitHub Enterprise Server (GHES), which could allow for authentication bypass. GHES is a popular platform f...

2024-058: Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Issued on 05.15.2024
2024-058: Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exp...

2024-057: A Vulnerability in SolarWinds Access Rights Manager Could Allow for Privilege Escalation
Issued on 05.15.2024
2024-057: A Vulnerability in SolarWinds Access Rights Manager Could Allow for Privilege Escalation
A vulnerability has been discovered in SolarWinds Access Rights Manager that could allow for privilege escalation. Successful exploitation of thi...

2024-056: Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
Issued on 05.15.2024
2024-056: Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Mozilla Products, the most severe of which could allow for arbitrary code execution. Mozilla Fi...

2024-055: Multiple Vulnerabilities in Siemens Ruggedcom Crossbow Could Allow for Arbitrary Code Execution
Issued on 05.14.2024
2024-055: Multiple Vulnerabilities in Siemens Ruggedcom Crossbow Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Siemens Ruggedcom Crossbow, the most severe of which could allow for arbitrary code execution. S...

2024-052: A Vulnerability in Google Chrome Could Allow for Arbitrary Code Execution
Issued on 05.14.2024
2024-052: A Vulnerability in Google Chrome Could Allow for Arbitrary Code Execution
A vulnerability has been discovered in Google Chrome, which could allow for arbitrary code execution. Successful exploitation of this vulnerabili...

2024-053: Critical Patches Issued for Microsoft Products, May 14, 2024
Issued on 05.14.2024
2024-053: Critical Patches Issued for Microsoft Products, May 14, 2024
Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution in the contex...

2024-054: Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
Issued on 05.14.2024
2024-054: Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution. Adobe Acroba...

2024-051: Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution
Issued on 05.13.2024
2024-051: Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Successful ex...

2024-049: A Vulnerability in Apache OFBiz Could Allow for Remote Code Execution
Issued on 05.09.2024
2024-049: A Vulnerability in Apache OFBiz Could Allow for Remote Code Execution
A vulnerability has been discovered in the Apache OFBiz, which could allow for remote code execution. Apache OFBiz is an open-source product for ...

Explore Related Cybersecurity Solutions

Filter by topic to learn more about related cybersecurity solutions or explore all cybersecurity solutions on the button below.

Safeguard IT systems against cyber threats with more than 100 configuration guidelines across more than 25 vendor product families.
Learn More
Protect your organization from cyber-attacks with globally recognized CIS Controls, companion guides, and mappings.
Learn More
CIS CyberMarket
Learn More
CIS Hardened Images
Learn More
CIS SecureSuite
Learn More
CIS Services
Learn More
Access resources for threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial (SLTT) government entities.
Learn More
Access resources for threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial (SLTT) government entities.
Learn More
See All Solutions