A significant IT outage has impacted global institutions, including banks, media outlets, airlines, and emergency services. While the precise cause is under investigation, initial reports link the outage to issues with Microsoft PC operating systems.

VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution.

Cisco disclosed three vulnerabilities in its management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software product.

Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.

This vulnerability is a remote-control execution vulnerability affecting Microsoft SharePoint Server. The vulnerability was assigned a CVSSv3 score of 7.2 and could allow an authenticated site owner to execute code on an affected SharePoint Server.

An improper neutralization of special elements used in a SQL command in Fortinet’s FortiClient EMS version 7.2.0 through 7.2.2. FortiClient EMS 7.0.1 through 7.0.10 allows attackers to execute unauthorized code or commands via specially crafted packets.