criticalvulnerability
CISA Adds Maximum-Severity GitLab Vulnerability to KEV Catalog, Confirms Wild Exploitation
Agency urges immediate patching after attackers begin exploiting flaw earlier this month
Cyber.TechVoid1 min read
Key Takeaways
- CISA has added a maximum-severity GitLab vulnerability to its KEV catalog, confirming active exploitation in the wild.
- GitLab patched the vulnerability earlier this month; patches are available for all supported versions.
- US federal agencies are subject to mandatory patching deadlines triggered by the KEV addition.
- All organizations using GitLab should update to the latest patched versions without delay.
Related Security News
highVulnerability
TeamViewer Remote Access Vulnerability Allows Compromised Hosts to Disrupt Viewer Sessions
TeamViewer has addressed a security vulnerability that permits a malicious or compromised host machine to crash the viewer's TeamViewer application during a remote support session. The issue stems from the remote control protocol and affects Windows, macOS, and Linux platforms. While the primary impact is a denial-of-service condition crashing the viewer, the potential for code execution depending on platform and session state is under investigation. Users are advised to update to the latest TeamViewer version.
The Hacker News1 min read
