#chrome

Your iPhone, iPad, and Mac now have a built-in password feature, complete with two-factor authentication.

An issue found in POWERAMP audioplayer build 925 bundle play and build 954 allows a remote attacker to gain privileges via the reverb and EQ preset parameters.

Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was detailed by JFrog late last month, impersonated legitimate packages to execute PowerShell code designed to retrieve a follow-on binary

National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.

Roxy Fileman versions 1.4.5 and below for .NET suffer from a remote shell upload vulnerability.

Chrome suffers from a heap buffer overflow vulnerability in base::SampleVectorBase::MoveSingleSampleToCounts.

Chrome suffers from a heap buffer overflow vulnerability in base::debug::ActivityUserData::ActivityUserData.

WebsiteBaker version 2.13.3 suffers from a cross site scripting vulnerability.

dotclear version 2.25.3 suffers from a remote shell upload vulnerability.

Paradox Security Systems version IPR512 suffers from a denial of service vulnerability.