GovCERT.HK - Security Alerts https://www.govcert.gov.hk/img/GovCERT.HK_logo_small.png GovCERT.HK https://www.govcert.gov.hk/ GovCERT.HK - Security Alerts en Copyright, www.govcert.gov.hk cert@govcert.gov.hk Security Alert (A26-05-41): Multiple Vulnerabilities in Microsoft Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1886 https://www.govcert.gov.hk/en/alerts_detail.php?id=1886 Fri, 22 May 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in several Microsoft products or components.

]]> High Threat Security Alert (A26-05-40): Multiple Vulnerabilities in Trend Micro Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1885 https://www.govcert.gov.hk/en/alerts_detail.php?id=1885 Fri, 22 May 2026 12:00:00 +0800 Trend Micro has published a security advisory to address multiple vulnerabilities in Trend Micro Products.

]]> Security Alert (A26-05-39): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1884 https://www.govcert.gov.hk/en/alerts_detail.php?id=1884 Thu, 21 May 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-05-38): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1883 https://www.govcert.gov.hk/en/alerts_detail.php?id=1883 Thu, 21 May 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> High Threat Security Alert (A26-05-37): Vulnerability in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1882 https://www.govcert.gov.hk/en/alerts_detail.php?id=1882 Thu, 21 May 2026 12:00:00 +0800 SonicWall released security advisories to address a vulnerability in SonicWall systems.

]]> High Threat Security Alert (A26-05-36): Multiple Vulnerabilities in Nginx Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1881 https://www.govcert.gov.hk/en/alerts_detail.php?id=1881 Wed, 20 May 2026 12:00:00 +0800 Nginx has released security updates to address multiple vulnerabilities in several Nginx products.

]]> Security Alert (A26-05-35): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1880 https://www.govcert.gov.hk/en/alerts_detail.php?id=1880 Wed, 20 May 2026 12:00:00 +0800 Mozilla has published the advisories (MFSA2026-46, MFSA2026-47 and MFSA2026-48) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A26-05-34): Vulnerability in F5 NGINX JavaScript (njs) https://www.govcert.gov.hk/en/alerts_detail.php?id=1879 https://www.govcert.gov.hk/en/alerts_detail.php?id=1879 Wed, 20 May 2026 12:00:00 +0800 F5 has published a security advisory to address a vulnerability in F5 Product.

]]> High Threat Security Alert (A26-05-33): Multiple Vulnerabilities in Microsoft Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1878 https://www.govcert.gov.hk/en/alerts_detail.php?id=1878 Wed, 20 May 2026 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A26-05-32): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1877 https://www.govcert.gov.hk/en/alerts_detail.php?id=1877 Mon, 18 May 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A26-05-31): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1876 https://www.govcert.gov.hk/en/alerts_detail.php?id=1876 Mon, 18 May 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A26-05-30): Vulnerability in Microsoft Windows Cloud Files Mini Filter Driver https://www.govcert.gov.hk/en/alerts_detail.php?id=1875 https://www.govcert.gov.hk/en/alerts_detail.php?id=1875 Mon, 18 May 2026 12:00:00 +0800 A researcher has published a proof-of-concept (PoC) exploit code for a zero-day vulnerability (known as "MiniPlasma") in Microsoft Windows Cloud Files Mini Filter Driver.

]]> Security Alert (A26-05-29): Vulnerability in VMware Fusion https://www.govcert.gov.hk/en/alerts_detail.php?id=1874 https://www.govcert.gov.hk/en/alerts_detail.php?id=1874 Fri, 15 May 2026 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware Products.

]]> High Threat Security Alert (A26-05-28): Vulnerability in Microsoft Exchange Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1873 https://www.govcert.gov.hk/en/alerts_detail.php?id=1873 Fri, 15 May 2026 12:00:00 +0800 Microsoft has released a security update to address a vulnerability in Microsoft Exchange Server.

]]> High Threat Security Alert (A26-05-27): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1872 https://www.govcert.gov.hk/en/alerts_detail.php?id=1872 Fri, 15 May 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> High Threat Security Alert (A26-05-26): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1871 https://www.govcert.gov.hk/en/alerts_detail.php?id=1871 Thu, 14 May 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> Security Alert (A26-05-25): Multiple Vulnerabilities in Apple Product https://www.govcert.gov.hk/en/alerts_detail.php?id=1870 https://www.govcert.gov.hk/en/alerts_detail.php?id=1870 Thu, 14 May 2026 12:00:00 +0800 Apple has released Safari 26.5 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A26-05-24): Multiple Vulnerabilities in Palo Alto Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1869 https://www.govcert.gov.hk/en/alerts_detail.php?id=1869 Thu, 14 May 2026 12:00:00 +0800 Palo Alto has published the security advisories to address multiple vulnerabilities in several Palo Alto products.

]]> High Threat Security Alert (A26-05-23): Multiple Vulnerabilities in Microsoft Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1868 https://www.govcert.gov.hk/en/alerts_detail.php?id=1868 Thu, 14 May 2026 12:00:00 +0800 A researcher has published proof-of-concept (PoC) exploit codes for the critical vulnerabilities (known as "YellowKey" and "GreenPlasma") in Microsoft BitLocker and Windows CTF Monitor.

]]> Security Alert (A26-05-22): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1867 https://www.govcert.gov.hk/en/alerts_detail.php?id=1867 Wed, 13 May 2026 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A26-05-21): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1866 https://www.govcert.gov.hk/en/alerts_detail.php?id=1866 Wed, 13 May 2026 12:00:00 +0800 The Apache Software Foundation released security updates to address multiple vulnerabilities in the Apache Tomcat.

]]> Security Alert (A26-05-20): Multiple Vulnerabilities in PHP https://www.govcert.gov.hk/en/alerts_detail.php?id=1865 https://www.govcert.gov.hk/en/alerts_detail.php?id=1865 Wed, 13 May 2026 12:00:00 +0800 PHP has released security advisories to address multiple vulnerabilities in PHP.

]]> Security Alert (A26-05-19): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1864 https://www.govcert.gov.hk/en/alerts_detail.php?id=1864 Wed, 13 May 2026 12:00:00 +0800 Ivanti has released security advisories to address the multiple vulnerabilities in Ivanti products.

]]> Security Alert (A26-05-18): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1863 https://www.govcert.gov.hk/en/alerts_detail.php?id=1863 Wed, 13 May 2026 12:00:00 +0800 Mozilla has published the advisory (MFSA2026-45) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A26-05-17): Multiple Vulnerabilities in Microsoft Products (May 2026) https://www.govcert.gov.hk/en/alerts_detail.php?id=1862 https://www.govcert.gov.hk/en/alerts_detail.php?id=1862 Wed, 13 May 2026 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A26-05-16): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1861 https://www.govcert.gov.hk/en/alerts_detail.php?id=1861 Tue, 12 May 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A26-05-15): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1860 https://www.govcert.gov.hk/en/alerts_detail.php?id=1860 Tue, 12 May 2026 12:00:00 +0800 Apple has released iOS 26.5, iPadOS 26.5, iOS 18.7.9, iPadOS 18.7.9, iPadOS 17.7.11, iOS 16.7.16, iPadOS 16.7.16, iOS 15.8.8, iPadOS 15.8.8, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5 and visionOS 26.5 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A26-05-14): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1859 https://www.govcert.gov.hk/en/alerts_detail.php?id=1859 Tue, 12 May 2026 12:00:00 +0800 QNAP has published a security advisory to address multiple vulnerabilities in QNAP products.

]]> High Threat Security Alert (A26-05-13): Vulnerability in Linux Kernel https://www.govcert.gov.hk/en/alerts_detail.php?id=1858 https://www.govcert.gov.hk/en/alerts_detail.php?id=1858 Mon, 11 May 2026 12:00:00 +0800 A local privilege escalation vulnerability (Dirty Frag) is found in the Linux kernel.

]]> Security Alert (A26-05-12): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1857 https://www.govcert.gov.hk/en/alerts_detail.php?id=1857 Fri, 08 May 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A26-05-11): Multiple Vulnerabilities in FireFox https://www.govcert.gov.hk/en/alerts_detail.php?id=1856 https://www.govcert.gov.hk/en/alerts_detail.php?id=1856 Fri, 08 May 2026 12:00:00 +0800 Mozilla has published the advisories (MFSA2026-40, MFSA2026-41 and MFSA2026-42) to address multiple vulnerabilities in Firefox.

]]> High Threat Security Alert (A26-05-10): Multiple Vulnerabilities in Ivanti Endpoint Manager Mobile https://www.govcert.gov.hk/en/alerts_detail.php?id=1855 https://www.govcert.gov.hk/en/alerts_detail.php?id=1855 Fri, 08 May 2026 12:00:00 +0800 Ivanti has released security advisories to address the vulnerabilities in Ivanti Endpoint Manager Mobile.

]]> Security Alert (A26-05-09): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1854 https://www.govcert.gov.hk/en/alerts_detail.php?id=1854 Thu, 07 May 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> Security Alert (A26-05-08): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1853 https://www.govcert.gov.hk/en/alerts_detail.php?id=1853 Thu, 07 May 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A26-05-07): Multiple Vulnerabilities in Juniper Networks Secure Analytics https://www.govcert.gov.hk/en/alerts_detail.php?id=1852 https://www.govcert.gov.hk/en/alerts_detail.php?id=1852 Wed, 06 May 2026 12:00:00 +0800 Juniper Networks has published a security advisory to address multiple vulnerabilities in Juniper Networks Secure Analytics.

]]> High Threat Security Alert (A26-05-06): Vulnerability in Palo Alto Networks PAN-OS https://www.govcert.gov.hk/en/alerts_detail.php?id=1851 https://www.govcert.gov.hk/en/alerts_detail.php?id=1851 Wed, 06 May 2026 12:00:00 +0800 Palo Alto has released a security update to address a vulnerability in PAN-OS.

]]> Security Alert (A26-05-05): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1850 https://www.govcert.gov.hk/en/alerts_detail.php?id=1850 Tue, 05 May 2026 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> Security Alert (A26-05-04): Vulnerability in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1849 https://www.govcert.gov.hk/en/alerts_detail.php?id=1849 Tue, 05 May 2026 12:00:00 +0800 Google has released Android Security Bulletin May 2026 to fix a security vulnerability in Android operation systems.

]]> Security Alert (A26-05-03): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1848 https://www.govcert.gov.hk/en/alerts_detail.php?id=1848 Mon, 04 May 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A26-05-02): Vulnerability in QNAP Product https://www.govcert.gov.hk/en/alerts_detail.php?id=1847 https://www.govcert.gov.hk/en/alerts_detail.php?id=1847 Mon, 04 May 2026 12:00:00 +0800 QNAP has published a security advisory to address a vulnerability in QNAP product.

]]> High Threat Security Alert (A26-05-01): Vulnerability in Linux Kernel https://www.govcert.gov.hk/en/alerts_detail.php?id=1846 https://www.govcert.gov.hk/en/alerts_detail.php?id=1846 Mon, 04 May 2026 12:00:00 +0800 A local privilege escalation vulnerability is found in the Linux kernel.

]]> Security Alert (A26-04-35): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1845 https://www.govcert.gov.hk/en/alerts_detail.php?id=1845 Thu, 30 Apr 2026 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems.

]]> High Threat Security Alert (A26-04-34): Vulnerability in cPanel & WHM / WP2 https://www.govcert.gov.hk/en/alerts_detail.php?id=1844 https://www.govcert.gov.hk/en/alerts_detail.php?id=1844 Thu, 30 Apr 2026 12:00:00 +0800 cPanel released a security advisory to address a vulnerability in affected system.

]]> Security Alert (A26-04-33): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1843 https://www.govcert.gov.hk/en/alerts_detail.php?id=1843 Wed, 29 Apr 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-04-32): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1842 https://www.govcert.gov.hk/en/alerts_detail.php?id=1842 Wed, 29 Apr 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A26-04-31): Multiple Vulnerabilities in FireFox https://www.govcert.gov.hk/en/alerts_detail.php?id=1841 https://www.govcert.gov.hk/en/alerts_detail.php?id=1841 Wed, 29 Apr 2026 12:00:00 +0800 Mozilla has published the advisories (MFSA2026-35, MFSA2026-36 and MFSA2026-37) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A26-04-30): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1840 https://www.govcert.gov.hk/en/alerts_detail.php?id=1840 Mon, 27 Apr 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A26-04-29): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1839 https://www.govcert.gov.hk/en/alerts_detail.php?id=1839 Mon, 27 Apr 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A26-04-28): Vulnerability in PackageKit https://www.govcert.gov.hk/en/alerts_detail.php?id=1838 https://www.govcert.gov.hk/en/alerts_detail.php?id=1838 Mon, 27 Apr 2026 12:00:00 +0800 PackageKit released a security advisory to address a vulnerability in affected system.

]]> Security Alert (A26-04-27): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1837 https://www.govcert.gov.hk/en/alerts_detail.php?id=1837 Thu, 23 Apr 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> Security Alert (A26-04-26): Vulnerability in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1836 https://www.govcert.gov.hk/en/alerts_detail.php?id=1836 Thu, 23 Apr 2026 12:00:00 +0800 Apple has released iOS 26.4.2, iPadOS 26.4.2, iOS 18.7.8 and iPadOS 18.7.8 to fix a vulnerability in various Apple devices.

]]> Security Alert (A26-04-25): Vulnerability in Microsoft ASP.NET Core https://www.govcert.gov.hk/en/alerts_detail.php?id=1835 https://www.govcert.gov.hk/en/alerts_detail.php?id=1835 Wed, 22 Apr 2026 12:00:00 +0800 Microsoft has released security updates and mitigations to address a vulnerability that affect ASP.NET Core 10.0.

]]> Security Alert (A26-04-24): Multiple Vulnerabilities in FireFox https://www.govcert.gov.hk/en/alerts_detail.php?id=1834 https://www.govcert.gov.hk/en/alerts_detail.php?id=1834 Wed, 22 Apr 2026 12:00:00 +0800 Mozilla has published the advisories (MFSA2026-30, MFSA2026-31 and MFSA2026-32) to address multiple vulnerabilities in Firefox.

]]> High Threat Security Alert (A26-04-23): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2026) https://www.govcert.gov.hk/en/alerts_detail.php?id=1833 https://www.govcert.gov.hk/en/alerts_detail.php?id=1833 Wed, 22 Apr 2026 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A26-04-22): Vulnerability in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1832 https://www.govcert.gov.hk/en/alerts_detail.php?id=1832 Mon, 21 Apr 2026 12:00:00 +0800 F5 has published a security advisory to address a vulnerability in F5 Products.

]]> Security Alert (A26-04-21): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1831 https://www.govcert.gov.hk/en/alerts_detail.php?id=1831 Mon, 20 Apr 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A26-04-20): Vulnerability in Microsoft Windows Defender https://www.govcert.gov.hk/en/alerts_detail.php?id=1830 https://www.govcert.gov.hk/en/alerts_detail.php?id=1830 Mon, 20 Apr 2026 12:00:00 +0800 A researcher has published a proof-of-concept (PoC) exploit code for a zero-day (known as "UnDefend") in Microsoft Windows Defender.

]]> High Threat Security Alert (A26-04-19): Vulnerability in Microsoft Windows Defender https://www.govcert.gov.hk/en/alerts_detail.php?id=1829 https://www.govcert.gov.hk/en/alerts_detail.php?id=1829 Fri, 17 Apr 2026 12:00:00 +0800 A researcher has published a proof-of-concept (PoC) exploit code for a critical vulnerability (known as "RedSun") in Microsoft Windows Defender.

]]> Security Alert (A26-04-18): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1828 https://www.govcert.gov.hk/en/alerts_detail.php?id=1828 Thu, 16 Apr 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> Security Alert (A26-04-17): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1827 https://www.govcert.gov.hk/en/alerts_detail.php?id=1827 Thu, 16 Apr 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-04-16): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1826 https://www.govcert.gov.hk/en/alerts_detail.php?id=1826 Wed, 15 Apr 2026 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A26-04-15): Multiple Vulnerabilities in Microsoft Products (April 2026) https://www.govcert.gov.hk/en/alerts_detail.php?id=1825 https://www.govcert.gov.hk/en/alerts_detail.php?id=1825 Wed, 15 Apr 2026 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A26-04-14): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1824 https://www.govcert.gov.hk/en/alerts_detail.php?id=1824 Mon, 13 Apr 2026 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A26-04-13): Vulnerability in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1823 https://www.govcert.gov.hk/en/alerts_detail.php?id=1823 Mon, 13 Apr 2026 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address a vulnerability.

]]> Security Alert (A26-04-12): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1822 https://www.govcert.gov.hk/en/alerts_detail.php?id=1822 Thu, 09 Apr 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-04-11): Multiple Vulnerabilities in Juniper Networks Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1821 https://www.govcert.gov.hk/en/alerts_detail.php?id=1821 Thu, 09 Apr 2026 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Juniper Networks Apstra, CTP OS, Junos OS, Junos OS Evolved, Junos Space and Support Insights Virtual Lightweight Collector.

]]> Security Alert (A26-04-10): Multiple Vulnerabilities in Sonicwall SMA1000 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1820 https://www.govcert.gov.hk/en/alerts_detail.php?id=1820 Thu, 09 Apr 2026 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall SMA1000 Series Products.

]]> High Threat Security Alert (A26-04-09): Vulnerability in Microsoft Windows Defender https://www.govcert.gov.hk/en/alerts_detail.php?id=1819 https://www.govcert.gov.hk/en/alerts_detail.php?id=1819 Wed, 08 Apr 2026 12:00:00 +0800 A researcher has published a proof-of-concept (PoC) exploit code for a critical vulnerability (known as "BlueHammer") in Microsoft Windows Defender.

]]> Security Alert (A26-04-08): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1818 https://www.govcert.gov.hk/en/alerts_detail.php?id=1818 Wed, 08 Apr 2026 12:00:00 +0800 Google has released Android Security Bulletin April 2026 to fix multiple security vulnerabilities in Android operation systems.

]]> Security Alert (A26-04-07): Vulnerability in F5OS-A https://www.govcert.gov.hk/en/alerts_detail.php?id=1817 https://www.govcert.gov.hk/en/alerts_detail.php?id=1817 Wed, 08 Apr 2026 12:00:00 +0800 F5 has published a security advisory to address a vulnerability in F5 Products.

]]> Security Alert (A26-04-06): Multiple Vulnerabilities in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=1816 https://www.govcert.gov.hk/en/alerts_detail.php?id=1816 Wed, 08 Apr 2026 12:00:00 +0800 OpenSSL has released 1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6 and 3.6.2 to fix the vulnerabilities in various versions of OpenSSL.

]]> Security Alert (A26-04-05): Multiple Vulnerabilities in FireFox https://www.govcert.gov.hk/en/alerts_detail.php?id=1815 https://www.govcert.gov.hk/en/alerts_detail.php?id=1815 Wed, 08 Apr 2026 12:00:00 +0800 Mozilla has published the advisories (MFSA2026-25, MFSA2026-26 and MFSA2026-27) to address multiple vulnerabilities in Firefox.

]]> High Threat Security Alert (A26-04-04): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1814 https://www.govcert.gov.hk/en/alerts_detail.php?id=1814 Wed, 08 Apr 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A26-04-03): Vulnerability in Fortinet FortiClientEMS https://www.govcert.gov.hk/en/alerts_detail.php?id=1813 https://www.govcert.gov.hk/en/alerts_detail.php?id=1813 Wed, 08 Apr 2026 12:00:00 +0800 Fortinet released a security advisory to address a vulnerability in Fortinet FortiClientEMS.

]]> High Threat Security Alert (A26-04-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1812 https://www.govcert.gov.hk/en/alerts_detail.php?id=1812 Thu, 02 Apr 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-04-01): Multiple Vulnerabilities in SonicWall Product https://www.govcert.gov.hk/en/alerts_detail.php?id=1811 https://www.govcert.gov.hk/en/alerts_detail.php?id=1811 Wed, 01 Apr 2026 12:00:00 +0800 SonicWall released a security advisory to address multiple vulnerabilities in SonicWall systems.

]]> High Threat Security Alert (A26-03-31): Multiple Vulnerabilities in Citrix Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1810 https://www.govcert.gov.hk/en/alerts_detail.php?id=1810 Tue, 31 Mar 2026 12:00:00 +0800 Citrix has released security advisories to address multiple vulnerabilities in Citrix products.

]]> Security Alert (A26-03-30): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1809 https://www.govcert.gov.hk/en/alerts_detail.php?id=1809 Mon, 30 Mar 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A26-03-29): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1808 https://www.govcert.gov.hk/en/alerts_detail.php?id=1808 Thu, 26 Mar 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> Security Alert (A26-03-28): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1807 https://www.govcert.gov.hk/en/alerts_detail.php?id=1807 Wed, 25 Mar 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> Security Alert (A26-03-27): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1806 https://www.govcert.gov.hk/en/alerts_detail.php?id=1806 Wed, 25 Mar 2026 12:00:00 +0800 Apple has released iOS 26.4, iPadOS 26.4, iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, Safari 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4 and Xcode 26.4 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A26-03-26): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1805 https://www.govcert.gov.hk/en/alerts_detail.php?id=1805 Wed, 25 Mar 2026 12:00:00 +0800 Mozilla has published the advisories (MFSA2026-20, MFSA2026-21 and MFSA2026-22) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A26-03-25): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1804 https://www.govcert.gov.hk/en/alerts_detail.php?id=1804 Tue, 24 Mar 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A26-03-24): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1803 https://www.govcert.gov.hk/en/alerts_detail.php?id=1803 Tue, 24 Mar 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-03-23): Vulnerability in Oracle Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1802 https://www.govcert.gov.hk/en/alerts_detail.php?id=1802 Mon, 23 Mar 2026 12:00:00 +0800 Oracle has released a security update to address a vulnerability in Oracle Identity Manager and Oracle Web Services Manager.

]]> Security Alert (A26-03-22): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1801 https://www.govcert.gov.hk/en/alerts_detail.php?id=1801 Mon, 23 Mar 2026 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> High Threat Security Alert (A26-03-21): Vulnerability in GNU Inetutils telnetd https://www.govcert.gov.hk/en/alerts_detail.php?id=1800 https://www.govcert.gov.hk/en/alerts_detail.php?id=1800 Thu, 19 Mar 2026 12:00:00 +0800 GNU Inetutils telnetd has published a security bulletin for the vulnerability.

]]> Security Alert (A26-03-20): Vulnerability in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1799 https://www.govcert.gov.hk/en/alerts_detail.php?id=1799 Wed, 18 Mar 2026 12:00:00 +0800 Apple has released iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1 and macOS 26.3.2 to fix a vulnerability in various Apple devices.

]]> Security Alert (A26-03-19): Vulnerability in Microsoft Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1798 https://www.govcert.gov.hk/en/alerts_detail.php?id=1798 Tue, 17 Mar 2026 12:00:00 +0800 Microsoft has released a security update to address a vulnerability in several Microsoft products or components.

]]> High Threat Security Alert (A26-03-18): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1797 https://www.govcert.gov.hk/en/alerts_detail.php?id=1797 Tue, 17 Mar 2026 12:00:00 +0800 Microsoft has released a security update to address a vulnerability in Microsoft Edge.

]]> High Threat Security Alert (A26-03-17): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1796 https://www.govcert.gov.hk/en/alerts_detail.php?id=1796 Mon, 16 Mar 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in several Microsoft products or components.

]]> High Threat Security Alert (A26-03-16): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1795 https://www.govcert.gov.hk/en/alerts_detail.php?id=1795 Fri, 13 Mar 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-03-15): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1794 https://www.govcert.gov.hk/en/alerts_detail.php?id=1794 Thu, 12 Mar 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-03-14): Vulnerability in F5OS https://www.govcert.gov.hk/en/alerts_detail.php?id=1793 https://www.govcert.gov.hk/en/alerts_detail.php?id=1793 Thu, 12 Mar 2026 12:00:00 +0800 F5 has published security advisory to address a vulnerability in F5 Products.

]]> Security Alert (A26-03-13): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1792 https://www.govcert.gov.hk/en/alerts_detail.php?id=1792 Thu, 12 Mar 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> High Threat Security Alert (A26-03-12): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1791 https://www.govcert.gov.hk/en/alerts_detail.php?id=1791 Thu, 12 Mar 2026 12:00:00 +0800 Apple has released iOS 16.7.15, iPadOS 16.7.15, iOS 15.8.7, iPadOS 15.8.7 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A26-03-11): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1790 https://www.govcert.gov.hk/en/alerts_detail.php?id=1790 Wed, 11 Mar 2026 12:00:00 +0800 Mozilla has published the advisory (MFSA2026-19) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A26-03-10): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1789 https://www.govcert.gov.hk/en/alerts_detail.php?id=1789 Wed, 11 Mar 2026 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A26-03-09): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1788 https://www.govcert.gov.hk/en/alerts_detail.php?id=1788 Wed, 11 Mar 2026 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A26-03-08): Multiple Vulnerabilities in Microsoft Products (March 2026) https://www.govcert.gov.hk/en/alerts_detail.php?id=1787 https://www.govcert.gov.hk/en/alerts_detail.php?id=1787 Wed, 11 Mar 2026 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A26-03-07): Vulnerability in F5 F5OS-A https://www.govcert.gov.hk/en/alerts_detail.php?id=1786 https://www.govcert.gov.hk/en/alerts_detail.php?id=1786 Tue, 10 Mar 2026 12:00:00 +0800 F5 has published security advisory to address a vulnerability in F5 F5OS-A.

]]> High Threat Security Alert (A26-03-06): Multiple Vulnerabilities in the Implementation of Client Isolation in Wi-Fi Protocol https://www.govcert.gov.hk/en/alerts_detail.php?id=1785 https://www.govcert.gov.hk/en/alerts_detail.php?id=1785 Tue, 10 Mar 2026 12:00:00 +0800 A researcher identifies several critical vulnerabilities (collectively known as "AirSnitch") in common Wi-Fi protocol implementations.

]]> Security Alert (A26-03-05): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1784 https://www.govcert.gov.hk/en/alerts_detail.php?id=1784 Mon, 09 Mar 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A26-03-04): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1783 https://www.govcert.gov.hk/en/alerts_detail.php?id=1783 Fri, 06 Mar 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-03-03): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1782 https://www.govcert.gov.hk/en/alerts_detail.php?id=1782 Thu, 05 Mar 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> High Threat Security Alert (A26-03-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1781 https://www.govcert.gov.hk/en/alerts_detail.php?id=1781 Mon, 03 Mar 2026 12:00:00 +0800 Google has released Android Security Bulletin March 2026 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A26-03-01): Multiple Vulnerabilities in Trend Micro Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1780 https://www.govcert.gov.hk/en/alerts_detail.php?id=1780 Mon, 02 Mar 2026 12:00:00 +0800 Trend Micro has published a security advisory to address multiple vulnerabilities in Apex One and Trend Vision One Endpoint.

]]> Security Alert (A26-02-36): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1779 https://www.govcert.gov.hk/en/alerts_detail.php?id=1779 Fri, 27 Feb 2026 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware Products.

]]> Security Alert (A26-02-35): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1778 https://www.govcert.gov.hk/en/alerts_detail.php?id=1778 Fri, 27 Feb 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A26-02-34): Vulnerability in Juniper Networks Junos OS Evolved https://www.govcert.gov.hk/en/alerts_detail.php?id=1777 https://www.govcert.gov.hk/en/alerts_detail.php?id=1777 Thu, 26 Feb 2026 12:00:00 +0800 Juniper Networks has a published security advisory to address a vulnerability in Juniper Networks Junos OS Evolved.

]]> High Threat Security Alert (A26-02-33): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1776 https://www.govcert.gov.hk/en/alerts_detail.php?id=1776 Thu, 26 Feb 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> Security Alert (A26-02-32): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1775 https://www.govcert.gov.hk/en/alerts_detail.php?id=1775 Wed, 25 Feb 2026 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems.

]]> High Threat Security Alert (A26-02-31): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1774 https://www.govcert.gov.hk/en/alerts_detail.php?id=1774 Wed, 25 Feb 2026 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware Products.

]]> Security Alert (A26-02-30): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1773 https://www.govcert.gov.hk/en/alerts_detail.php?id=1773 Wed, 25 Feb 2026 12:00:00 +0800 Mozilla has published the advisories (MFSA2026-13, MFSA2026-14 and MFSA2026-15) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A26-02-29): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1772 https://www.govcert.gov.hk/en/alerts_detail.php?id=1772 Wed, 25 Feb 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-02-28): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1771 https://www.govcert.gov.hk/en/alerts_detail.php?id=1771 Mon, 23 Feb 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A26-02-27): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1770 https://www.govcert.gov.hk/en/alerts_detail.php?id=1770 Mon, 20 Feb 2026 12:00:00 +0800 The Apache Software Foundation released security updates to address a vulnerability in the Apache Tomcat.

]]> Security Alert (A26-02-26): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1769 https://www.govcert.gov.hk/en/alerts_detail.php?id=1769 Mon, 20 Feb 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome. 

]]> Security Alert (A26-02-25): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1768 https://www.govcert.gov.hk/en/alerts_detail.php?id=1768 Mon, 20 Feb 2026 12:00:00 +0800 Mozilla has published the advisories (MFSA2026-10 and MFSA2026-11) to address a vulnerability in Firefox.

]]> High Threat Security Alert (A26-02-24): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1767 https://www.govcert.gov.hk/en/alerts_detail.php?id=1767 Mon, 20 Feb 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> High Threat Security Alert (A26-02-23): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1766 https://www.govcert.gov.hk/en/alerts_detail.php?id=1766 Mon, 20 Feb 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A26-02-22): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1765 https://www.govcert.gov.hk/en/alerts_detail.php?id=1765 Mon, 16 Feb 2026 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A26-02-21): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1764 https://www.govcert.gov.hk/en/alerts_detail.php?id=1764 Mon, 13 Feb 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A26-02-20): Multiple Vulnerabilities in Juniper Networks Product https://www.govcert.gov.hk/en/alerts_detail.php?id=1763 https://www.govcert.gov.hk/en/alerts_detail.php?id=1763 Mon, 13 Feb 2026 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Juniper Secure Analytics.

]]> High Threat Security Alert (A26-02-19): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1762 https://www.govcert.gov.hk/en/alerts_detail.php?id=1762 Mon, 12 Feb 2026 12:00:00 +0800 Apple has released iOS 26.3, iPadOS 26.3, iOS 18.7.5, iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, Safari 26.3, tvOS 26.3, visionOS 26.3 and watchOS 26.3 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A26-02-18): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1761 https://www.govcert.gov.hk/en/alerts_detail.php?id=1761 Mon, 12 Feb 2026 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A26-02-17): Multiple Vulnerabilities in Ivanti Endpoint Manager https://www.govcert.gov.hk/en/alerts_detail.php?id=1760 https://www.govcert.gov.hk/en/alerts_detail.php?id=1760 Mon, 11 Feb 2026 12:00:00 +0800 Ivanti has released security advisories to address multiple vulnerabilities in Ivanti Endpoint Manager.

]]> Security Alert (A26-02-16): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1759 https://www.govcert.gov.hk/en/alerts_detail.php?id=1759 Mon, 11 Feb 2026 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> High Threat Security Alert (A26-02-15): Multiple Vulnerabilities in Microsoft Products (February 2026) https://www.govcert.gov.hk/en/alerts_detail.php?id=1758 https://www.govcert.gov.hk/en/alerts_detail.php?id=1758 Mon, 11 Feb 2026 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A26-02-14): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1757 https://www.govcert.gov.hk/en/alerts_detail.php?id=1757 Mon, 10 Feb 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> Security Alert (A26-02-13): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1756 https://www.govcert.gov.hk/en/alerts_detail.php?id=1756 Mon, 09 Feb 2026 12:00:00 +0800 Microsoft has released a security update to address a vulnerability in Microsoft Edge.

]]> High Threat Security Alert (A26-02-12): Vulnerability in Fortinet FortiClientEMS https://www.govcert.gov.hk/en/alerts_detail.php?id=1755 https://www.govcert.gov.hk/en/alerts_detail.php?id=1755 Mon, 09 Feb 2026 12:00:00 +0800 Fortinet released security advisory to address a vulnerability in Fortinet FortiClientEMS.

]]> High Threat Security Alert (A26-02-11): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1754 https://www.govcert.gov.hk/en/alerts_detail.php?id=1754 Mon, 09 Feb 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> Security Alert (A26-02-10): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1753 https://www.govcert.gov.hk/en/alerts_detail.php?id=1753 Mon, 06 Feb 2026 12:00:00 +0800 Microsoft has released security updates to address a vulnerability in Microsoft Edge.

]]> Security Alert (A26-02-09): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1752 https://www.govcert.gov.hk/en/alerts_detail.php?id=1752 Mon, 06 Feb 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> Security Alert (A26-02-08): Vulnerability in Juniper Networks Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1751 https://www.govcert.gov.hk/en/alerts_detail.php?id=1751 Mon, 06 Feb 2026 12:00:00 +0800 Juniper Networks has published security advisory to address a vulnerability in Juniper Junos OS and Junos OS Evolved.

]]> Security Alert (A26-02-07): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1750 https://www.govcert.gov.hk/en/alerts_detail.php?id=1750 Mon, 05 Feb 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> Security Alert (A26-02-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1749 https://www.govcert.gov.hk/en/alerts_detail.php?id=1749 Mon, 05 Feb 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> Security Alert (A26-02-05): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1748 https://www.govcert.gov.hk/en/alerts_detail.php?id=1748 Mon, 04 Feb 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A26-02-04): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1747 https://www.govcert.gov.hk/en/alerts_detail.php?id=1747 Mon, 04 Feb 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> Security Alert (A26-02-03): Multiple Vulnerabilities in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=1746 https://www.govcert.gov.hk/en/alerts_detail.php?id=1746 Mon, 03 Feb 2026 12:00:00 +0800 OpenSSL has released 1.0.2zn, 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5 and 3.6.1 to fix the vulnerabilities in various versions of OpenSSL.

]]> Security Alert (A26-02-02): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1745 https://www.govcert.gov.hk/en/alerts_detail.php?id=1745 Mon, 02 Feb 2026 12:00:00 +0800 Microsoft has released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A26-02-01): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1744 https://www.govcert.gov.hk/en/alerts_detail.php?id=1744 Mon, 02 Feb 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> Security Alert (A26-01-29): Vulnerability in QNAP Product https://www.govcert.gov.hk/en/alerts_detail.php?id=1743 https://www.govcert.gov.hk/en/alerts_detail.php?id=1743 Fri, 30 Jan 2026 12:00:00 +0800 QNAP has published security advisory to address a vulnerability in QNAP product.

]]> High Threat Security Alert (A26-01-28): Multiple Vulnerabilities in Ivanti Endpoint Manager Mobile https://www.govcert.gov.hk/en/alerts_detail.php?id=1742 https://www.govcert.gov.hk/en/alerts_detail.php?id=1742 Fri, 30 Jan 2026 12:00:00 +0800 Ivanti has released security advisories to address the vulnerabilities in Ivanti products.

]]> Security Alert (A26-01-27): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1741 https://www.govcert.gov.hk/en/alerts_detail.php?id=1741 Thu, 29 Jan 2026 12:00:00 +0800 Apple has released Keynote 15.1 and Pages 15.1 to fix the vulnerabilities in Apple Products.

]]> High Threat Security Alert (A26-01-26): Multiple Vulnerabilities in Juniper Networks Product https://www.govcert.gov.hk/en/alerts_detail.php?id=1740 https://www.govcert.gov.hk/en/alerts_detail.php?id=1740 Thu, 29 Jan 2026 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Juniper Session Smart Route.

]]> Security Alert (A26-01-25): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1739 https://www.govcert.gov.hk/en/alerts_detail.php?id=1739 Wed, 28 Jan 2026 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A26-01-24): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1738 https://www.govcert.gov.hk/en/alerts_detail.php?id=1738 Wed, 28 Jan 2026 12:00:00 +0800 Mozilla has published the advisory (MFSA2026-06) to address multiple vulnerabilities in Firefox.

]]> High Threat Security Alert (A26-01-23): Vulnerability in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1737 https://www.govcert.gov.hk/en/alerts_detail.php?id=1737 Wed, 28 Jan 2026 12:00:00 +0800 Fortinet has released security advisory to address a vulnerability in Fortinet systems.

]]> Security Alert (A26-01-22): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1736 https://www.govcert.gov.hk/en/alerts_detail.php?id=1736 Tue, 27 Jan 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> High Threat Security Alert (A26-01-21): Vulnerability in Microsoft Office https://www.govcert.gov.hk/en/alerts_detail.php?id=1735 https://www.govcert.gov.hk/en/alerts_detail.php?id=1735 Tue, 27 Jan 2026 12:00:00 +0800 Microsoft has released security updates and mitigations addressing the vulnerability that affects several products in Microsoft Office.

]]> Security Alert (A26-01-20): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1734 https://www.govcert.gov.hk/en/alerts_detail.php?id=1734 Mon, 26 Jan 2026 12:00:00 +0800 Microsoft has released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A26-01-19): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1733 https://www.govcert.gov.hk/en/alerts_detail.php?id=1733 Mon, 26 Jan 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> High Threat Security Alert (A26-01-18): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1732 https://www.govcert.gov.hk/en/alerts_detail.php?id=1732 Fri, 23 Jan 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 Products.

]]> High Threat Security Alert (A26-01-17): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1731 https://www.govcert.gov.hk/en/alerts_detail.php?id=1731 Thu, 22 Jan 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> Security Alert (A26-01-16): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1730 https://www.govcert.gov.hk/en/alerts_detail.php?id=1730 Wed, 21 Jan 2026 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> High Threat Security Alert (A26-01-15): Multiple Vulnerabilities in Oracle Java and Oracle Products (Jan 2026) https://www.govcert.gov.hk/en/alerts_detail.php?id=1729 https://www.govcert.gov.hk/en/alerts_detail.php?id=1729 Wed, 21 Jan 2026 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A26-01-14): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1728 https://www.govcert.gov.hk/en/alerts_detail.php?id=1728 Mon, 19 Jan 2026 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A26-01-13): Vulnerability in F5 F5OS https://www.govcert.gov.hk/en/alerts_detail.php?id=1727 https://www.govcert.gov.hk/en/alerts_detail.php?id=1727 Mon, 19 Jan 2026 12:00:00 +0800 F5 has published a security advisory to address a vulnerability in F5 F5OS.

]]> Security Alert (A26-01-12): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1726 https://www.govcert.gov.hk/en/alerts_detail.php?id=1726 Fri, 16 Jan 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco devices and software.

]]> High Threat Security Alert (A26-01-11): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1725 https://www.govcert.gov.hk/en/alerts_detail.php?id=1725 Fri, 16 Jan 2026 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 products.

]]> Security Alert (A26-01-10): Vulnerability in Palo Alto Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1724 https://www.govcert.gov.hk/en/alerts_detail.php?id=1724 Thu, 15 Jan 2026 12:00:00 +0800 Palo Alto has published a security advisory to address the vulnerability in PAN-OS.

]]> Security Alert (A26-01-09): Multiple Vulnerabilities in Juniper Networks Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1723 https://www.govcert.gov.hk/en/alerts_detail.php?id=1723 Thu, 15 Jan 2026 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Junos OS, Junos OS Evolved, Junos Space, Paragon Automation and Policy Enforcer.

]]> Security Alert (A26-01-08): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1722 https://www.govcert.gov.hk/en/alerts_detail.php?id=1722 Wed, 14 Jan 2026 12:00:00 +0800 Mozilla has published the advisories (MFSA2026-01, MFSA2026-02 and MFSA2026-03) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A26-01-07): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1721 https://www.govcert.gov.hk/en/alerts_detail.php?id=1721 Wed, 14 Jan 2026 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A26-01-06): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1720 https://www.govcert.gov.hk/en/alerts_detail.php?id=1720 Wed, 14 Jan 2026 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> High Threat Security Alert (A26-01-05): Multiple Vulnerabilities in Microsoft Products (January 2026) https://www.govcert.gov.hk/en/alerts_detail.php?id=1719 https://www.govcert.gov.hk/en/alerts_detail.php?id=1719 Wed, 14 Jan 2026 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A26-01-04): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1718 https://www.govcert.gov.hk/en/alerts_detail.php?id=1718 Mon, 12 Jan 2026 12:00:00 +0800 Microsoft has released a security update to address a vulnerability in Microsoft Edge.

]]> High Threat Security Alert (A26-01-03): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1717 https://www.govcert.gov.hk/en/alerts_detail.php?id=1717 Thu, 08 Jan 2026 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco products or components.

]]> Security Alert (A26-01-02): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1716 https://www.govcert.gov.hk/en/alerts_detail.php?id=1716 Thu, 07 Jan 2026 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A26-01-01): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1715 https://www.govcert.gov.hk/en/alerts_detail.php?id=1715 Tue, 05 Jan 2026 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A25-12-22): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1714 https://www.govcert.gov.hk/en/alerts_detail.php?id=1714 Mon, 29 Dec 2025 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware Products.

]]> High Threat Security Alert (A25-12-21): Vulnerability in WatchGuard Fireware https://www.govcert.gov.hk/en/alerts_detail.php?id=1713 https://www.govcert.gov.hk/en/alerts_detail.php?id=1713 Mon, 22 Dec 2025 12:00:00 +0800 WatchGuard has released a security update to address a vulnerability in WatchGuard Fireware.

]]> Security Alert (A25-12-20): Multiple Vulnerabilities in PHP https://www.govcert.gov.hk/en/alerts_detail.php?id=1712 https://www.govcert.gov.hk/en/alerts_detail.php?id=1712 Fri, 19 Dec 2025 12:00:00 +0800 PHP has released security advisories to address multiple vulnerabilities in PHP.

]]> Security Alert (A25-12-19): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1711 https://www.govcert.gov.hk/en/alerts_detail.php?id=1711 Fri, 19 Dec 2025 12:00:00 +0800 Mozilla has published the advisory (MFSA2025-98) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A25-12-18): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1710 https://www.govcert.gov.hk/en/alerts_detail.php?id=1710 Fri, 19 Dec 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-12-17): Vulnerability in SonicWall SMA1000 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1709 https://www.govcert.gov.hk/en/alerts_detail.php?id=1709 Thu, 18 Dec 2025 12:00:00 +0800 SonicWall has released a security update to address a vulnerability in SonicWall SMA1000 Series Products.

]]> High Threat Security Alert (A25-12-16): Vulnerability in Cisco AsyncOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1708 https://www.govcert.gov.hk/en/alerts_detail.php?id=1708 Thu, 18 Dec 2025 12:00:00 +0800 Cisco released a security advisory to address the vulnerability in Cisco device and software.

]]> Security Alert (A25-12-15): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1707 https://www.govcert.gov.hk/en/alerts_detail.php?id=1707 Wed, 17 Dec 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-12-14): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1706 https://www.govcert.gov.hk/en/alerts_detail.php?id=1706 Mon, 15 Dec 2025 12:00:00 +0800 Apple has released iOS 26.2, iPadOS 26.2, iOS 18.7.3, iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, Safari 26.2, tvOS 26.2, visionOS 26.2 and watchOS 26.2 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A25-12-13): Multiple Vulnerabilities in React https://www.govcert.gov.hk/en/alerts_detail.php?id=1705 https://www.govcert.gov.hk/en/alerts_detail.php?id=1705 Fri, 12 Dec 2025 12:00:00 +0800 React released a security advisory to address the recent threat activity affecting React Server Components.

]]> High Threat Security Alert (A25-12-12): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1704 https://www.govcert.gov.hk/en/alerts_detail.php?id=1704 Fri, 12 Dec 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-12-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1703 https://www.govcert.gov.hk/en/alerts_detail.php?id=1703 Thu, 11 Dec 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-12-10): Multiple Vulnerabilities in Ivanti Endpoint Manager https://www.govcert.gov.hk/en/alerts_detail.php?id=1702 https://www.govcert.gov.hk/en/alerts_detail.php?id=1702 Wed, 10 Dec 2025 12:00:00 +0800 Ivanti has released security advisories to address multiple vulnerabilities in Ivanti Endpoint Manager Mobile.

]]> Security Alert (A25-12-09): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1701 https://www.govcert.gov.hk/en/alerts_detail.php?id=1701 Wed, 10 Dec 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-92, MFSA2025-93 and MFSA2025-94) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A25-12-08): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1700 https://www.govcert.gov.hk/en/alerts_detail.php?id=1700 Wed, 10 Dec 2025 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A25-12-07): Multiple Vulnerabilities in Microsoft Products (December 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1699 https://www.govcert.gov.hk/en/alerts_detail.php?id=1699 Wed, 10 Dec 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A25-12-06): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1698 https://www.govcert.gov.hk/en/alerts_detail.php?id=1698 Wed, 10 Dec 2025 12:00:00 +0800 Fortinet has released security updates to address multiple vulnerabilities in several Fortinet products or components.

]]> Security Alert (A25-12-05): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1697 https://www.govcert.gov.hk/en/alerts_detail.php?id=1697 Fri, 05 Dec 2025 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> Security Alert (A25-12-04): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1696 https://www.govcert.gov.hk/en/alerts_detail.php?id=1696 Fri, 05 Dec 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-12-03): Multiple Vulnerabilities in React Server Components and Next.js https://www.govcert.gov.hk/en/alerts_detail.php?id=1695 https://www.govcert.gov.hk/en/alerts_detail.php?id=1695 Thu, 04 Dec 2025 12:00:00 +0800 React and Next.js released a security advisory to address the recent threat activity affecting React Server Components and Next.js.

]]> Security Alert (A25-12-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1694 https://www.govcert.gov.hk/en/alerts_detail.php?id=1694 Wed, 03 Dec 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-12-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1693 https://www.govcert.gov.hk/en/alerts_detail.php?id=1693 Tue, 02 Dec 2025 12:00:00 +0800 Google has released Android Security Bulletin December 2025 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A25-11-21): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1692 https://www.govcert.gov.hk/en/alerts_detail.php?id=1692 Thu, 20 Nov 2025 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems.

]]> High Threat Security Alert (A25-11-20): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1691 https://www.govcert.gov.hk/en/alerts_detail.php?id=1691 Wed, 19 Nov 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-11-19): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1690 https://www.govcert.gov.hk/en/alerts_detail.php?id=1690 Wed, 19 Nov 2025 12:00:00 +0800 Fortinet has released security updates to address multiple vulnerabilities in several Fortinet products or components.

]]> High Threat Security Alert (A25-11-18): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1689 https://www.govcert.gov.hk/en/alerts_detail.php?id=1689 Tue, 18 Nov 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-11-17): Vulnerability in Fortinet FortiWeb https://www.govcert.gov.hk/en/alerts_detail.php?id=1688 https://www.govcert.gov.hk/en/alerts_detail.php?id=1688 Mon, 17 Nov 2025 12:00:00 +0800 Fortinet released security advisories to address a vulnerability in Fortinet FortiWeb.

]]> Security Alert (A25-11-16): Vulnerability in Apple Product https://www.govcert.gov.hk/en/alerts_detail.php?id=1687 https://www.govcert.gov.hk/en/alerts_detail.php?id=1687 Fri, 14 Nov 2025 12:00:00 +0800 Apple has released Compressor 4.11.1 to fix the vulnerability in Apple Compressor.

]]> Security Alert (A25-11-15): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1686 https://www.govcert.gov.hk/en/alerts_detail.php?id=1686 Fri, 14 Nov 2025 12:00:00 +0800 Microsoft has released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A25-11-14): Multiple Vulnerabilities in Cisco Product https://www.govcert.gov.hk/en/alerts_detail.php?id=1685 https://www.govcert.gov.hk/en/alerts_detail.php?id=1685 Fri, 14 Nov 2025 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in Cisco Catalyst Center.

]]> Security Alert (A25-11-13): Vulnerability in Palo Alto Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1684 https://www.govcert.gov.hk/en/alerts_detail.php?id=1684 Thu, 13 Nov 2025 12:00:00 +0800 Palo Alto has published a security advisory to address the vulnerability in PAN-OS.

]]> Security Alert (A25-11-12): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1683 https://www.govcert.gov.hk/en/alerts_detail.php?id=1683 Wed, 12 Nov 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A25-11-11): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1682 https://www.govcert.gov.hk/en/alerts_detail.php?id=1682 Wed, 12 Nov 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-87, MFSA2025-88 and MFSA2025-89) to address multiple vulnerabilities in Firefox.

]]> High Threat Security Alert (A25-11-10): Multiple Vulnerabilities in Microsoft Products (November 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1681 https://www.govcert.gov.hk/en/alerts_detail.php?id=1681 Wed, 12 Nov 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A25-11-09): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1680 https://www.govcert.gov.hk/en/alerts_detail.php?id=1680 Mon, 10 Nov 2025 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A25-11-08): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1679 https://www.govcert.gov.hk/en/alerts_detail.php?id=1679 Fri, 07 Nov 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-11-07): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1678 https://www.govcert.gov.hk/en/alerts_detail.php?id=1678 Thu, 06 Nov 2025 12:00:00 +0800 Cisco has released security updates to address multiple vulnerabilities in several Cisco products or components.

]]> Security Alert (A25-11-06): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1677 https://www.govcert.gov.hk/en/alerts_detail.php?id=1677 Thu, 06 Nov 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-11-05): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1676 https://www.govcert.gov.hk/en/alerts_detail.php?id=1676 Thu, 06 Nov 2025 12:00:00 +0800 Apple has released iOS 18.7.2 and iPadOS 18.7.2 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A25-11-04): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1675 https://www.govcert.gov.hk/en/alerts_detail.php?id=1675 Tue, 04 Nov 2025 12:00:00 +0800 Apple has released iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, Safari 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1 and Xcode 26.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A25-11-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1674 https://www.govcert.gov.hk/en/alerts_detail.php?id=1674 Tue, 04 Nov 2025 12:00:00 +0800 Google has released Android Security Bulletin November 2025 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A25-11-02): Vulnerability in SonicWall SMA100 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1673 https://www.govcert.gov.hk/en/alerts_detail.php?id=1673 Mon, 03 Nov 2025 12:00:00 +0800 SonicWall released a security advisory to address a vulnerability in SonicWall SMA100 Series products.

]]> Security Alert (A25-11-01): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1672 https://www.govcert.gov.hk/en/alerts_detail.php?id=1672 Mon, 03 Nov 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-10-22): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1671 https://www.govcert.gov.hk/en/alerts_detail.php?id=1671 Thu, 30 Oct 2025 12:00:00 +0800 Mozilla has published the advisory (MFSA2025-86) to address a vulnerability in Firefox.

]]> Security Alert (A25-10-21): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1670 https://www.govcert.gov.hk/en/alerts_detail.php?id=1670 Thu, 30 Oct 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-10-20): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1669 https://www.govcert.gov.hk/en/alerts_detail.php?id=1669 Tue, 28 Oct 2025 12:00:00 +0800 The Apache Software Foundation released security updates to address multiple vulnerabilities in the Apache Tomcat.

]]> Security Alert (A25-10-19): Vulnerability in QNAP Product https://www.govcert.gov.hk/en/alerts_detail.php?id=1668 https://www.govcert.gov.hk/en/alerts_detail.php?id=1668 Mon, 27 Oct 2025 12:00:00 +0800 QNAP has published a security advisory to address a vulnerability in QNAP product.

]]> Security Alert (A25-10-18): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1667 https://www.govcert.gov.hk/en/alerts_detail.php?id=1667 Mon, 22 Oct 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A25-10-17): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1666 https://www.govcert.gov.hk/en/alerts_detail.php?id=1666 Mon, 20 Oct 2025 12:00:00 +0800 Microsoft has released a security update to address a vulnerability in Microsoft Edge.

]]> High Threat Security Alert (A25-10-16): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1665 https://www.govcert.gov.hk/en/alerts_detail.php?id=1665 Thu, 16 Oct 2025 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 products.

]]> Security Alert (A25-10-15): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1664 https://www.govcert.gov.hk/en/alerts_detail.php?id=1664 Thu, 16 Oct 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-10-14): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1663 https://www.govcert.gov.hk/en/alerts_detail.php?id=1663 Wed, 15 Oct 2025 12:00:00 +0800 Fortinet has released security updates to address multiple vulnerabilities in several Fortinet products or components.

]]> Security Alert (A25-10-13): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1662 https://www.govcert.gov.hk/en/alerts_detail.php?id=1662 Wed, 15 Oct 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A25-10-12): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1661 https://www.govcert.gov.hk/en/alerts_detail.php?id=1661 Wed, 15 Oct 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-81, MFSA2025-82, MFSA2025-83, MFSA2025-84 and MFSA2025-85) to address multiple vulnerabilities in Firefox.

]]> High Threat Security Alert (A25-10-11): Multiple Vulnerabilities in Microsoft Products (October 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1660 https://www.govcert.gov.hk/en/alerts_detail.php?id=1660 Wed, 15 Oct 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A25-10-10): Multiple Vulnerabilities in Juniper Networks Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1659 https://www.govcert.gov.hk/en/alerts_detail.php?id=1659 Mon, 13 Oct 2025 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Junos OS and Junos OS Evolved.

]]> High Threat Security Alert (A25-10-09): Vulnerability in Oracle E-Business Suite https://www.govcert.gov.hk/en/alerts_detail.php?id=1658 https://www.govcert.gov.hk/en/alerts_detail.php?id=1658 Mon, 13 Oct 2025 12:00:00 +0800 Oracle has released a security update to address a vulnerability in Oracle E-Business Suite.

]]> Security Alert (A25-10-08): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1657 https://www.govcert.gov.hk/en/alerts_detail.php?id=1657 Fri, 10 Oct 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-10-07): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1656 https://www.govcert.gov.hk/en/alerts_detail.php?id=1656 Wed, 08 Oct 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-10-06): Vulnerability in Oracle E-Business Suite https://www.govcert.gov.hk/en/alerts_detail.php?id=1655 https://www.govcert.gov.hk/en/alerts_detail.php?id=1655 Wed, 08 Oct 2025 12:00:00 +0800 Oracle has released a security update to address a vulnerability in Oracle E-Business Suite.

]]> Security Alert (A25-10-05): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1654 https://www.govcert.gov.hk/en/alerts_detail.php?id=1654 Mon, 06 Oct 2025 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A25-10-04): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1653 https://www.govcert.gov.hk/en/alerts_detail.php?id=1653 Fri, 03 Oct 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-10-03): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1652 https://www.govcert.gov.hk/en/alerts_detail.php?id=1652 Thu, 02 Oct 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-10-02): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1651 https://www.govcert.gov.hk/en/alerts_detail.php?id=1651 Thu, 02 Oct 2025 12:00:00 +0800 Mozilla has published the advisory (MFSA2025-80) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A25-10-01): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1650 https://www.govcert.gov.hk/en/alerts_detail.php?id=1650 Thu, 02 Oct 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-09-21): Vulnerability in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1649 https://www.govcert.gov.hk/en/alerts_detail.php?id=1649 Tue, 30 Sep 2025 12:00:00 +0800 Apple has released iOS 26.0.1, iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1 and visionOS 26.0.1 to fix the vulnerability in various Apple devices.

]]> Security Alert (A25-09-20): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1648 https://www.govcert.gov.hk/en/alerts_detail.php?id=1648 Fri, 26 Sep 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-09-19): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1647 https://www.govcert.gov.hk/en/alerts_detail.php?id=1647 Fri, 26 Sep 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-09-18): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1646 https://www.govcert.gov.hk/en/alerts_detail.php?id=1646 Thu, 25 Sep 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-09-17): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1645 https://www.govcert.gov.hk/en/alerts_detail.php?id=1645 Thu, 25 Sep 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A25-09-16): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1644 https://www.govcert.gov.hk/en/alerts_detail.php?id=1644 Tue, 23 Sep 2025 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems.

]]> High Threat Security Alert (A25-09-15): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1643 https://www.govcert.gov.hk/en/alerts_detail.php?id=1643 Mon, 22 Sep 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-09-14): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1642 https://www.govcert.gov.hk/en/alerts_detail.php?id=1642 Thu, 18 Sep 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-09-13): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1641 https://www.govcert.gov.hk/en/alerts_detail.php?id=1641 Wed, 17 Sep 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-73, MFSA2025-74 and MFSA2025-75) to address multiple vulnerabilities in Firefox.

]]> High Threat Security Alert (A25-09-12): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1640 https://www.govcert.gov.hk/en/alerts_detail.php?id=1640 Tue, 16 Sep 2025 12:00:00 +0800 Apple has released iOS 26, iPadOS 26, iOS 18.7, iPadOS 18.7, iOS 16.7.12, iPadOS 16.7.12, iOS 15.8.5, iPadOS 15.8.5, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, Safari 26, tvOS 26, visionOS 26, watchOS 26 and Xcode 26 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A25-09-11): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1639 https://www.govcert.gov.hk/en/alerts_detail.php?id=1639 Fri, 12 Sep 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-09-10): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1638 https://www.govcert.gov.hk/en/alerts_detail.php?id=1638 Thu, 11 Sep 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-09-09): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1637 https://www.govcert.gov.hk/en/alerts_detail.php?id=1637 Wed, 10 Sep 2025 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A25-09-08): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1636 https://www.govcert.gov.hk/en/alerts_detail.php?id=1636 Wed, 10 Sep 2025 12:00:00 +0800 Ivanti has released security advisories to address multiple vulnerabilities in Ivanti products.

]]> Security Alert (A25-09-07): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1635 https://www.govcert.gov.hk/en/alerts_detail.php?id=1635 Wed, 10 Sep 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in several Google Chrome.

]]> High Threat Security Alert (A25-09-06): Multiple Vulnerabilities in Microsoft Products (September 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1634 https://www.govcert.gov.hk/en/alerts_detail.php?id=1634 Wed, 10 Sep 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A25-09-05): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1633 https://www.govcert.gov.hk/en/alerts_detail.php?id=1633 Mon, 08 Sep 2025 12:00:00 +0800 Microsoft has released security updates to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-09-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1632 https://www.govcert.gov.hk/en/alerts_detail.php?id=1632 Thu, 04 Sep 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-09-03): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1631 https://www.govcert.gov.hk/en/alerts_detail.php?id=1631 Wed, 03 Sep 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-09-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1630 https://www.govcert.gov.hk/en/alerts_detail.php?id=1630 Wed, 03 Sep 2025 12:00:00 +0800 Google has released Android Security Bulletin September 2025 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A25-09-01): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1629 https://www.govcert.gov.hk/en/alerts_detail.php?id=1629 Mon, 01 Sep 2025 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A25-08-25): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1628 https://www.govcert.gov.hk/en/alerts_detail.php?id=1628 Fri, 29 Aug 2025 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A25-08-24): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1627 https://www.govcert.gov.hk/en/alerts_detail.php?id=1627 Thu, 28 Aug 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-08-23): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1626 https://www.govcert.gov.hk/en/alerts_detail.php?id=1626 Wed, 27 Aug 2025 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A25-08-22): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1625 https://www.govcert.gov.hk/en/alerts_detail.php?id=1625 Wed, 27 Aug 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> High Threat Security Alert (A25-08-21): Multiple Vulnerabilities in Citrix Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1624 https://www.govcert.gov.hk/en/alerts_detail.php?id=1624 Wed, 27 Aug 2025 12:00:00 +0800 Citrix released security advisories to address multiple vulnerabilities in Citrix products.

]]> Security Alert (A25-08-20): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1623 https://www.govcert.gov.hk/en/alerts_detail.php?id=1623 Fri, 22 Aug 2025 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A25-08-19): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1622 https://www.govcert.gov.hk/en/alerts_detail.php?id=1622 Thu, 21 Aug 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A25-08-18): Vulnerability in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1621 https://www.govcert.gov.hk/en/alerts_detail.php?id=1621 Thu, 21 Aug 2025 12:00:00 +0800 Apple has released iOS 18.6.2, iPadOS 17.7.10, iPadOS 18.6.2, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8 and macOS Ventura 13.7.8 to fix the vulnerability in various Apple devices.

]]> Security Alert (A25-08-17): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1620 https://www.govcert.gov.hk/en/alerts_detail.php?id=1620 Wed, 20 Aug 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-64, MFSA2025-65, MFSA2025-66 and MFSA2025-67) to address multiple vulnerabilities in Firefox.

]]> Security Alert (A25-08-16): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1619 https://www.govcert.gov.hk/en/alerts_detail.php?id=1619 Wed, 20 Aug 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> High Threat Security Alert (A25-08-15): Vulnerability in Fortinet FortiWeb https://www.govcert.gov.hk/en/alerts_detail.php?id=1618 https://www.govcert.gov.hk/en/alerts_detail.php?id=1618 Mon, 18 Aug 2025 12:00:00 +0800 Fortinet released security advisories to address a vulnerability in Fortinet FortiWeb.

]]> Security Alert (A25-08-14): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1617 https://www.govcert.gov.hk/en/alerts_detail.php?id=1617 Mon, 18 Aug 2025 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-08-13): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1616 https://www.govcert.gov.hk/en/alerts_detail.php?id=1616 Fri, 15 Aug 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-08-12): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1615 https://www.govcert.gov.hk/en/alerts_detail.php?id=1615 Fri, 15 Aug 2025 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 products.

]]> Security Alert (A25-08-11): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1614 https://www.govcert.gov.hk/en/alerts_detail.php?id=1614 Thu, 14 Aug 2025 12:00:00 +0800 The Apache Software Foundation released security updates to address a vulnerability in the Apache Tomcat.

]]> High Threat Security Alert (A25-08-10): Vulnerability in FortiSIEM Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1613 https://www.govcert.gov.hk/en/alerts_detail.php?id=1613 Thu, 14 Aug 2025 12:00:00 +0800 Fortinet released security advisories to address the vulnerability in FortiSIEM.

]]> Security Alert (A25-08-09): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1612 https://www.govcert.gov.hk/en/alerts_detail.php?id=1612 Wed, 13 Aug 2025 12:00:00 +0800 Ivanti has released security advisory to address multiple vulnerabilities in Ivanti products.

]]> Security Alert (A25-08-08): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1611 https://www.govcert.gov.hk/en/alerts_detail.php?id=1611 Wed, 13 Aug 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-08-07): Multiple Vulnerabilities in Microsoft Products (August 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1610 https://www.govcert.gov.hk/en/alerts_detail.php?id=1610 Wed, 13 Aug 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A25-08-06): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1609 https://www.govcert.gov.hk/en/alerts_detail.php?id=1609 Fri, 08 Aug 2025 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-08-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1608 https://www.govcert.gov.hk/en/alerts_detail.php?id=1608 Thu, 07 Aug 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A25-08-05): Security Threat affecting SonicWall Gen 7 Firewalls https://www.govcert.gov.hk/en/alerts_detail.php?id=1607 https://www.govcert.gov.hk/en/alerts_detail.php?id=1607 Thu, 07 Aug 2025 12:00:00 +0800 SonicWall released a security advisory to address the recent threat activity affecting SonicWall Gen 7 Firewalls.

]]> Security Alert (A25-08-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1606 https://www.govcert.gov.hk/en/alerts_detail.php?id=1606 Thu, 07 Aug 2025 12:00:00 +0800 Google has released Android Security Bulletin August 2025 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A25-08-02): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1605 https://www.govcert.gov.hk/en/alerts_detail.php?id=1605 Mon, 04 Aug 2025 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems.

]]> Security Alert (A25-08-01): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1604 https://www.govcert.gov.hk/en/alerts_detail.php?id=1604 Fri, 01 Aug 2025 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A25-07-23): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1603 https://www.govcert.gov.hk/en/alerts_detail.php?id=1603 Wed, 30 Jul 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> High Threat Security Alert (A25-07-22): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1602 https://www.govcert.gov.hk/en/alerts_detail.php?id=1602 Wed, 30 Jul 2025 12:00:00 +0800 Apple has released iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7 and macOS Ventura 13.7.7 to fix the multiple vulnerabilities in various Apple devices.

]]> Security Alert (A25-07-21): Multiple Vulnerabilities in SonicWall SMA100 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1601 https://www.govcert.gov.hk/en/alerts_detail.php?id=1601 Mon, 28 Jul 2025 12:00:00 +0800 SonicWall released a security advisory to address multiple vulnerabilities in SonicWall SMA100 Series products.

]]> Security Alert (A25-07-20): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1600 https://www.govcert.gov.hk/en/alerts_detail.php?id=1600 Mon, 28 Jul 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-07-19): Vulnerability in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1599 https://www.govcert.gov.hk/en/alerts_detail.php?id=1599 Thu, 24 Jul 2025 12:00:00 +0800 The Apache Software Foundation released a security update to address a vulnerability in the HTTP Server and its modules.

]]> Security Alert (A25-07-18): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1598 https://www.govcert.gov.hk/en/alerts_detail.php?id=1598 Wed, 23 Jul 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-56, MFSA2025-57, MFSA2025-58 and MFSA2025-59) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A25-07-17): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1597 https://www.govcert.gov.hk/en/alerts_detail.php?id=1597 Wed, 23 Jul 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-07-16): Multiple Vulnerabilities in Microsoft SharePoint Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1596 https://www.govcert.gov.hk/en/alerts_detail.php?id=1596 Tue, 22 Jul 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft SharePoint Server.

]]> Security Alert (A25-07-15): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1595 https://www.govcert.gov.hk/en/alerts_detail.php?id=1595 Thu, 17 Jul 2025 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A25-07-14): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1594 https://www.govcert.gov.hk/en/alerts_detail.php?id=1594 Thu, 17 Jul 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A25-07-13): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1593 https://www.govcert.gov.hk/en/alerts_detail.php?id=1593 Thu, 17 Jul 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-07-12): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1592 https://www.govcert.gov.hk/en/alerts_detail.php?id=1592 Wed, 16 Jul 2025 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> High Threat Security Alert (A25-07-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1591 https://www.govcert.gov.hk/en/alerts_detail.php?id=1591 Wed, 16 Jul 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-07-10): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1590 https://www.govcert.gov.hk/en/alerts_detail.php?id=1590 Fri, 11 Jul 2025 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> Security Alert (A25-07-09): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1589 https://www.govcert.gov.hk/en/alerts_detail.php?id=1589 Fri, 11 Jul 2025 12:00:00 +0800 The Apache Software Foundation released security updates to address multiple vulnerabilities in the Apache Tomcat.

]]> High Threat Security Alert (A25-07-08): Multiple Vulnerabilities in Palo Alto Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1588 https://www.govcert.gov.hk/en/alerts_detail.php?id=1588 Fri, 11 Jul 2025 12:00:00 +0800 Palo Alto has published a security advisory to address the vulnerabilities in PAN-OS.

]]> Security Alert (A25-07-07): Multiple Vulnerabilities in Juniper Networks Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1587 https://www.govcert.gov.hk/en/alerts_detail.php?id=1587 Thu, 10 Jul 2025 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Apstra, CTPView, Junos OS, Junos OS Evolved and Security Director.

]]> High Threat Security Alert (A25-07-06): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1586 https://www.govcert.gov.hk/en/alerts_detail.php?id=1586 Thu, 10 Jul 2025 12:00:00 +0800 Fortinet has published security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A25-07-05): Multiple Vulnerabilities in Microsoft Products (July 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1585 https://www.govcert.gov.hk/en/alerts_detail.php?id=1585 Wed, 09 Jul 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A25-07-04): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1584 https://www.govcert.gov.hk/en/alerts_detail.php?id=1584 Mon, 07 Jul 2025 12:00:00 +0800 The Apache Software Foundation released security updates to address multiple vulnerabilities in the Apache Tomcat.

]]> Security Alert (A25-07-03): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1583 https://www.govcert.gov.hk/en/alerts_detail.php?id=1583 Thu, 03 Jul 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A25-07-02): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1582 https://www.govcert.gov.hk/en/alerts_detail.php?id=1582 Thu, 03 Jul 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-07-01): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1581 https://www.govcert.gov.hk/en/alerts_detail.php?id=1581 Wed, 02 Jul 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A25-06-20): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1580 https://www.govcert.gov.hk/en/alerts_detail.php?id=1580 Fri, 27 Jun 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-06-19): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1579 https://www.govcert.gov.hk/en/alerts_detail.php?id=1579 Thu, 26 Jun 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-06-18): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1578 https://www.govcert.gov.hk/en/alerts_detail.php?id=1578 Wed, 25 Jun 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-06-17): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1577 https://www.govcert.gov.hk/en/alerts_detail.php?id=1577 Wed, 25 Jun 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-51, MFSA2025-52, and MFSA2025-53) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A25-06-16): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1576 https://www.govcert.gov.hk/en/alerts_detail.php?id=1576 Mon, 23 Jun 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-06-15): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1575 https://www.govcert.gov.hk/en/alerts_detail.php?id=1575 Thu, 19 Jun 2025 12:00:00 +0800 Cisco released security advisory to address the vulnerability in Cisco devices and software.

]]> Security Alert (A25-06-14): Multiple Vulnerabilities in Veeam Backup and Replication Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1574 https://www.govcert.gov.hk/en/alerts_detail.php?id=1574 Wed, 18 Jun 2025 12:00:00 +0800 Veeam has published security advisory to address multiple vulnerabilities in Veeam Backup and Replication products.

]]> Security Alert (A25-06-13): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1573 https://www.govcert.gov.hk/en/alerts_detail.php?id=1573 Wed, 18 Jun 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-06-12): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1572 https://www.govcert.gov.hk/en/alerts_detail.php?id=1572 Wed, 18 Jun 2025 12:00:00 +0800 The Apache Software Foundation released security updates to address multiple vulnerabilities in the Apache Tomcat.

]]> Security Alert (A25-06-11): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1571 https://www.govcert.gov.hk/en/alerts_detail.php?id=1571 Mon, 16 Jun 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-06-10): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1570 https://www.govcert.gov.hk/en/alerts_detail.php?id=1570 Wed, 11 Jun 2025 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A25-06-09): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1569 https://www.govcert.gov.hk/en/alerts_detail.php?id=1569 Wed, 11 Jun 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-06-08): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1568 https://www.govcert.gov.hk/en/alerts_detail.php?id=1568 Wed, 11 Jun 2025 12:00:00 +0800 Mozilla has published the advisory (MFSA2025-47) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A25-06-07): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1567 https://www.govcert.gov.hk/en/alerts_detail.php?id=1567 Wed, 11 Jun 2025 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A25-06-06): Multiple Vulnerabilities in Microsoft Products (June 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1566 https://www.govcert.gov.hk/en/alerts_detail.php?id=1566 Wed, 11 Jun 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A25-06-05): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1565 https://www.govcert.gov.hk/en/alerts_detail.php?id=1565 Mon, 09 Jun 2025 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A25-06-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1564 https://www.govcert.gov.hk/en/alerts_detail.php?id=1564 Thu, 05 Jun 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A25-06-03): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1563 https://www.govcert.gov.hk/en/alerts_detail.php?id=1563 Wed, 04 Jun 2025 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-06-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1562 https://www.govcert.gov.hk/en/alerts_detail.php?id=1562 Tue, 03 Jun 2025 12:00:00 +0800 Google has released Android Security Bulletin June 2025 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A25-06-01): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1561 https://www.govcert.gov.hk/en/alerts_detail.php?id=1561 Tue, 03 Jun 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-05-21): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1560 https://www.govcert.gov.hk/en/alerts_detail.php?id=1560 Fri, 30 May 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-05-20): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1559 https://www.govcert.gov.hk/en/alerts_detail.php?id=1559 Fri, 30 May 2025 12:00:00 +0800 The Apache Software Foundation released security updates to address the vulnerability in the Apache Tomcat.

]]> Security Alert (A25-05-19): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1558 https://www.govcert.gov.hk/en/alerts_detail.php?id=1558 Wed, 28 May 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-05-18): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1557 https://www.govcert.gov.hk/en/alerts_detail.php?id=1557 Wed, 28 May 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-42, MFSA2025-43, and MFSA2025-44) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A25-05-17): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1556 https://www.govcert.gov.hk/en/alerts_detail.php?id=1556 Thu, 22 May 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-05-16): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1555 https://www.govcert.gov.hk/en/alerts_detail.php?id=1555 Thu, 22 May 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-05-15): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1554 https://www.govcert.gov.hk/en/alerts_detail.php?id=1554 Mon, 19 May 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-36, MFSA2025-37 and MFSA2025-38) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A25-05-14): Vulnerability in SonicWall SMA1000 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1553 https://www.govcert.gov.hk/en/alerts_detail.php?id=1553 Fri, 16 May 2025 12:00:00 +0800 SonicWall released a security advisory to address vulnerability in SonicWall SMA1000 Series products.

]]> High Threat Security Alert (A25-05-13): Multiple Vulnerabilities in Ivanti Endpoint Manager Mobile https://www.govcert.gov.hk/en/alerts_detail.php?id=1552 https://www.govcert.gov.hk/en/alerts_detail.php?id=1552 Fri, 16 May 2025 12:00:00 +0800 Ivanti has released security advisory to address multiple vulnerabilities in Ivanti Endpoint Manager Mobile.

]]> High Threat Security Alert (A25-05-12): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1551 https://www.govcert.gov.hk/en/alerts_detail.php?id=1551 Fri, 16 May 2025 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-05-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1550 https://www.govcert.gov.hk/en/alerts_detail.php?id=1550 Thu, 15 May 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-05-10): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1549 https://www.govcert.gov.hk/en/alerts_detail.php?id=1549 Wed, 14 May 2025 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> High Threat Security Alert (A25-05-09): Multiple Vulnerabilities in Microsoft Products (May 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1548 https://www.govcert.gov.hk/en/alerts_detail.php?id=1548 Wed, 14 May 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A25-05-08): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1547 https://www.govcert.gov.hk/en/alerts_detail.php?id=1547 Tue, 13 May 2025 12:00:00 +0800 Apple has released iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6 and Safari 18.5 to fix the multiple vulnerabilities in various Apple devices.

]]> Security Alert (A25-05-07): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1546 https://www.govcert.gov.hk/en/alerts_detail.php?id=1546 Fri, 09 May 2025 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A25-05-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1545 https://www.govcert.gov.hk/en/alerts_detail.php?id=1545 Fri, 09 May 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-05-05): Multiple Vulnerabilities in SonicWall SMA100 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1544 https://www.govcert.gov.hk/en/alerts_detail.php?id=1544 Thu, 08 May 2025 12:00:00 +0800 SonicWall released a security advisory to address multiple vulnerabilities in SonicWall SMA100 Series products.

]]> Security Alert (A25-05-04): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1543 https://www.govcert.gov.hk/en/alerts_detail.php?id=1543 Wed, 07 May 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A25-05-03): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1542 https://www.govcert.gov.hk/en/alerts_detail.php?id=1542 Tue, 06 May 2025 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-05-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1541 https://www.govcert.gov.hk/en/alerts_detail.php?id=1541 Tue, 06 May 2025 12:00:00 +0800 Google has released Android Security Bulletin May 2025 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A25-05-01): Vulnerability in SonicWall SMA1000 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1540 https://www.govcert.gov.hk/en/alerts_detail.php?id=1540 Fri, 02 May 2025 12:00:00 +0800 SonicWall released a security advisory to address vulnerability in SonicWall SMA1000 Series products.

]]> Security Alert (A25-04-26): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1539 https://www.govcert.gov.hk/en/alerts_detail.php?id=1539 Wed, 30 Apr 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-28, MFSA2025-29, and MFSA2025-30) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A25-04-25): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1538 https://www.govcert.gov.hk/en/alerts_detail.php?id=1538 Wed, 30 Apr 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-04-24): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1537 https://www.govcert.gov.hk/en/alerts_detail.php?id=1537 Tue, 29 Apr 2025 12:00:00 +0800 The Apache Software Foundation released security updates to address the vulnerabilities in the Apache Tomcat.

]]> Security Alert (A25-04-23): Vulnerability in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1536 https://www.govcert.gov.hk/en/alerts_detail.php?id=1536 Thu, 24 Apr 2025 12:00:00 +0800 SonicWall released a security advisory to address a vulnerability in SonicWall systems.

]]> High Threat Security Alert (A25-04-22): Vulnerability in Erlang/OTP https://www.govcert.gov.hk/en/alerts_detail.php?id=1535 https://www.govcert.gov.hk/en/alerts_detail.php?id=1535 Wed, 23 Apr 2025 12:00:00 +0800 Erlang has released a security advisory to address a vulnerability in Erlang/OTP.

]]> Security Alert (A25-04-21): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1534 https://www.govcert.gov.hk/en/alerts_detail.php?id=1534 Tue, 22 Apr 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-04-20): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1533 https://www.govcert.gov.hk/en/alerts_detail.php?id=1533 Tue, 22 Apr 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-04-19): Vulnerability in SonicWall SMA 100 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1532 https://www.govcert.gov.hk/en/alerts_detail.php?id=1532 Tue, 22 Apr 2025 12:00:00 +0800 SonicWall released a security advisory to address vulnerability in SMA 100 series products.

]]> Security Alert (A25-04-18): Vulnerability in SonicWall Connect Tunnel Windows Client https://www.govcert.gov.hk/en/alerts_detail.php?id=1531 https://www.govcert.gov.hk/en/alerts_detail.php?id=1531 Tue, 22 Apr 2025 12:00:00 +0800 SonicWall released a security advisory to address a vulnerability in Connect Tunnel Windows Client.

]]> Security Alert (A25-04-17): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1530 https://www.govcert.gov.hk/en/alerts_detail.php?id=1530 Tue, 22 Apr 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A25-04-16): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1529 https://www.govcert.gov.hk/en/alerts_detail.php?id=1529 Tue, 22 Apr 2025 12:00:00 +0800 Apple has released iOS 18.4.1, iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1 and visionOS 2.4.1 to fix the multiple vulnerabilities in various Apple devices.

]]> Security Alert (A25-04-15): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1528 https://www.govcert.gov.hk/en/alerts_detail.php?id=1528 Wed, 16 Apr 2025 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A25-04-14): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1527 https://www.govcert.gov.hk/en/alerts_detail.php?id=1527 Wed, 16 Apr 2025 12:00:00 +0800 Mozilla has published an advisory (MFSA2025-25) to address a vulnerability in Firefox browser.

]]> Security Alert (A25-04-13): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1526 https://www.govcert.gov.hk/en/alerts_detail.php?id=1526 Tue, 15 Apr 2025 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A25-04-12): Multiple Vulnerabilities in SonicWall NetExtender https://www.govcert.gov.hk/en/alerts_detail.php?id=1525 https://www.govcert.gov.hk/en/alerts_detail.php?id=1525 Fri, 11 Apr 2025 12:00:00 +0800 SonicWall released a security advisory to address multiple vulnerabilities in NetExtender.

]]> Security Alert (A25-04-11): Multiple Vulnerabilities in Juniper Networks Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1524 https://www.govcert.gov.hk/en/alerts_detail.php?id=1524 Fri, 11 Apr 2025 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Junos OS, Junos OS Evolved and Junos Space.

]]> Security Alert (A25-04-10): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1523 https://www.govcert.gov.hk/en/alerts_detail.php?id=1523 Wed, 09 Apr 2025 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A25-04-09): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1522 https://www.govcert.gov.hk/en/alerts_detail.php?id=1522 Wed, 09 Apr 2025 12:00:00 +0800 Google released a security update to address vulnerability in Google Chrome.

]]> High Threat Security Alert (A25-04-08): Multiple Vulnerabilities in Microsoft Products (April 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1521 https://www.govcert.gov.hk/en/alerts_detail.php?id=1521 Wed, 09 Apr 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A25-04-07): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1520 https://www.govcert.gov.hk/en/alerts_detail.php?id=1520 Tue, 08 Apr 2025 12:00:00 +0800 Google has released Android Security Bulletin April 2025 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A25-04-06): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1519 https://www.govcert.gov.hk/en/alerts_detail.php?id=1519 Mon, 07 Apr 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-04-05): Vulnerability in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1518 https://www.govcert.gov.hk/en/alerts_detail.php?id=1518 Mon, 07 Apr 2025 12:00:00 +0800 Ivanti has released security advisories to address the vulnerability in Ivanti products.

]]> Security Alert (A25-04-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1517 https://www.govcert.gov.hk/en/alerts_detail.php?id=1517 Thu, 03 Apr 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-04-03): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1516 https://www.govcert.gov.hk/en/alerts_detail.php?id=1516 Wed, 02 Apr 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-04-02): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1515 https://www.govcert.gov.hk/en/alerts_detail.php?id=1515 Wed, 02 Apr 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-20, MFSA2025-21, MFSA2025-22, MFSA2025-23 and MFSA2025-24) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A25-04-01): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1514 https://www.govcert.gov.hk/en/alerts_detail.php?id=1514 Tue, 01 Apr 2025 12:00:00 +0800 Apple has released iOS 15.8.4, iPadOS 15.8.4, iOS 18.3.2, iOS 16.7.11, iPadOS 16.7.11, iPadOS 17.7.6, iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, Safari 18.4, visionOS 2.4, tvOS 18.4 and Xcode 16.3 to fix the multiple vulnerabilities in various Apple devices.

]]> Security Alert (A25-03-25): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1513 https://www.govcert.gov.hk/en/alerts_detail.php?id=1513 Fri, 28 Mar 2025 12:00:00 +0800 Mozilla has published an advisory (MFSA2025-19) to address a vulnerability in Firefox browser.

]]> High Threat Security Alert (A25-03-24): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1512 https://www.govcert.gov.hk/en/alerts_detail.php?id=1512 Thu, 27 Mar 2025 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A25-03-23): Vulnerability in VMware Tools https://www.govcert.gov.hk/en/alerts_detail.php?id=1511 https://www.govcert.gov.hk/en/alerts_detail.php?id=1511 Wed, 26 Mar 2025 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware Tools.

]]> High Threat Security Alert (A25-03-22): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1510 https://www.govcert.gov.hk/en/alerts_detail.php?id=1510 Wed, 26 Mar 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A25-03-21): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1509 https://www.govcert.gov.hk/en/alerts_detail.php?id=1509 Mon, 24 Mar 2025 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-03-20): Vulnerability in Veeam Backup and Replication Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1508 https://www.govcert.gov.hk/en/alerts_detail.php?id=1508 Fri, 21 Mar 2025 12:00:00 +0800 Veeam has published security advisory to address vulnerability in Veeam Backup and Replication products.

]]> Security Alert (A25-03-19): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1507 https://www.govcert.gov.hk/en/alerts_detail.php?id=1507 Thu, 20 Mar 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A25-03-18): Multiple Vulnerabilities in PHP https://www.govcert.gov.hk/en/alerts_detail.php?id=1506 https://www.govcert.gov.hk/en/alerts_detail.php?id=1506 Wed, 19 Mar 2025 12:00:00 +0800 PHP has released security advisories to address multiple vulnerabilities in PHP.

]]> Security Alert (A25-03-17): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1505 https://www.govcert.gov.hk/en/alerts_detail.php?id=1505 Thu, 13 Mar 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-03-16): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1504 https://www.govcert.gov.hk/en/alerts_detail.php?id=1504 Thu, 13 Mar 2025 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-03-15): Vulnerability in Juniper Networks Junos OS https://www.govcert.gov.hk/en/alerts_detail.php?id=1503 https://www.govcert.gov.hk/en/alerts_detail.php?id=1503 Thu, 13 Mar 2025 12:00:00 +0800 Juniper Networks has published security advisory to address vulnerability in Junos OS.

]]> Security Alert (A25-03-14): Multiple Vulnerabilities in Fortinet FortiWeb https://www.govcert.gov.hk/en/alerts_detail.php?id=1502 https://www.govcert.gov.hk/en/alerts_detail.php?id=1502 Wed, 12 Mar 2025 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A25-03-13): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1501 https://www.govcert.gov.hk/en/alerts_detail.php?id=1501 Wed, 12 Mar 2025 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A25-03-12): Multiple Vulnerabilities in Microsoft Products (March 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1500 https://www.govcert.gov.hk/en/alerts_detail.php?id=1500 Wed, 12 Mar 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A25-03-11): Vulnerability in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1499 https://www.govcert.gov.hk/en/alerts_detail.php?id=1499 Wed, 12 Mar 2025 12:00:00 +0800 Apple has released iOS 18.3.2, iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1 and visionOS 2.3.2 to fix the vulnerability in various Apple devices.

]]> Security Alert (A25-03-10): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1498 https://www.govcert.gov.hk/en/alerts_detail.php?id=1498 Tue, 11 Mar 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-03-09): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1497 https://www.govcert.gov.hk/en/alerts_detail.php?id=1497 Tue, 11 Mar 2025 12:00:00 +0800 The Apache Software Foundation released security updates to address the vulnerability in the Apache Tomcat.

]]> Security Alert (A25-03-08): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1496 https://www.govcert.gov.hk/en/alerts_detail.php?id=1496 Mon, 10 Mar 2025 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A25-03-07): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1495 https://www.govcert.gov.hk/en/alerts_detail.php?id=1495 Mon, 10 Mar 2025 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-03-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1494 https://www.govcert.gov.hk/en/alerts_detail.php?id=1494 Thu, 06 Mar 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-03-05): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1493 https://www.govcert.gov.hk/en/alerts_detail.php?id=1493 Thu, 06 Mar 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-03-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1492 https://www.govcert.gov.hk/en/alerts_detail.php?id=1492 Thu, 06 Mar 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-14, MFSA2025-15, MFSA2025-16, MFSA2025-17 and MFSA2025-18) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A25-03-03): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1491 https://www.govcert.gov.hk/en/alerts_detail.php?id=1491 Thu, 06 Mar 2025 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A25-03-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1490 https://www.govcert.gov.hk/en/alerts_detail.php?id=1490 Tue, 04 Mar 2025 12:00:00 +0800 Google has released Android Security Bulletin March 2025 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A25-03-01): Vulnerability in Synology DiskStation Manager https://www.govcert.gov.hk/en/alerts_detail.php?id=1489 https://www.govcert.gov.hk/en/alerts_detail.php?id=1489 Mon, 03 Mar 2025 12:00:00 +0800 Synology has published a security advisory to address a vulnerability in various versions of DiskStation Manager (DSM).

]]> Security Alert (A25-02-19): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1488 https://www.govcert.gov.hk/en/alerts_detail.php?id=1488 Thu, 27 Feb 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-02-18): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1487 https://www.govcert.gov.hk/en/alerts_detail.php?id=1487 Mon, 24 Feb 2025 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-02-17): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1486 https://www.govcert.gov.hk/en/alerts_detail.php?id=1486 Thu, 20 Feb 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-02-16): Multiple Vulnerabilities in OpenSSH https://www.govcert.gov.hk/en/alerts_detail.php?id=1485 https://www.govcert.gov.hk/en/alerts_detail.php?id=1485 Wed, 19 Feb 2025 12:00:00 +0800 OpenSSH has released a new version to address multiple vulnerabilities in various versions of OpenSSH.

]]> Security Alert (A25-02-15): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1484 https://www.govcert.gov.hk/en/alerts_detail.php?id=1484 Wed, 19 Feb 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-02-14): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1483 https://www.govcert.gov.hk/en/alerts_detail.php?id=1483 Wed, 19 Feb 2025 12:00:00 +0800 Mozilla has published an advisory (MFSA2025-12) to address a vulnerability in Firefox browser.

]]> Security Alert (A25-02-13): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1482 https://www.govcert.gov.hk/en/alerts_detail.php?id=1482 Mon, 17 Feb 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-02-12): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1481 https://www.govcert.gov.hk/en/alerts_detail.php?id=1481 Thu, 13 Feb 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-02-11): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1480 https://www.govcert.gov.hk/en/alerts_detail.php?id=1480 Wed, 12 Feb 2025 12:00:00 +0800 Ivanti has released a security advisory to address multiple vulnerabilities in Ivanti products.

]]> Security Alert (A25-02-10): Vulnerability in Fortinet FortiOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1479 https://www.govcert.gov.hk/en/alerts_detail.php?id=1479 Wed, 12 Feb 2025 12:00:00 +0800 Fortinet released a security advisory to address a vulnerability in Fortinet FortiOS.

]]> High Threat Security Alert (A25-02-09): Multiple Vulnerabilities in Microsoft Products (February 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1478 https://www.govcert.gov.hk/en/alerts_detail.php?id=1478 Wed, 12 Feb 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A25-02-08): Vulnerability in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1477 https://www.govcert.gov.hk/en/alerts_detail.php?id=1477 Tue, 11 Feb 2025 12:00:00 +0800 Apple has released iOS 18.3.1, iPadOS 17.7.5 and iPadOS 18.3.1 to fix the vulnerability in various Apple devices.

]]> Security Alert (A25-02-07): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1476 https://www.govcert.gov.hk/en/alerts_detail.php?id=1476 Fri, 07 Feb 2025 12:00:00 +0800 Microsoft released a security update to address vulnerabilities in Microsoft Edge.

]]> Security Alert (A25-02-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1475 https://www.govcert.gov.hk/en/alerts_detail.php?id=1475 Thu, 06 Feb 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-02-05): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1474 https://www.govcert.gov.hk/en/alerts_detail.php?id=1474 Wed, 05 Feb 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A25-02-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1473 https://www.govcert.gov.hk/en/alerts_detail.php?id=1473 Wed, 05 Feb 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-07, MFSA2025-08 and MFSA2025-09) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A25-02-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1472 https://www.govcert.gov.hk/en/alerts_detail.php?id=1472 Tue, 04 Feb 2025 12:00:00 +0800 Google has released Android Security Bulletin February 2025 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A25-02-02): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1471 https://www.govcert.gov.hk/en/alerts_detail.php?id=1471 Mon, 03 Feb 2025 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A25-02-01): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1470 https://www.govcert.gov.hk/en/alerts_detail.php?id=1470 Mon, 03 Feb 2025 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> High Threat Security Alert (A25-01-18): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1469 https://www.govcert.gov.hk/en/alerts_detail.php?id=1469 Tue, 28 Jan 2025 12:00:00 +0800 Apple has released iOS 18.3, iPadOS 17.7.4, iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3 and Safari 18.3 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A25-01-17): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1468 https://www.govcert.gov.hk/en/alerts_detail.php?id=1468 Mon, 27 Jan 2025 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A25-01-16): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1467 https://www.govcert.gov.hk/en/alerts_detail.php?id=1467 Fri, 24 Jan 2025 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> High Threat Security Alert (A25-01-15): Vulnerability in SonicWall SMA1000 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1466 https://www.govcert.gov.hk/en/alerts_detail.php?id=1466 Fri, 24 Jan 2025 12:00:00 +0800 SonicWall released a security advisory to address a vulnerability in SMA1000 series products.

]]> Security Alert (A25-01-14): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1465 https://www.govcert.gov.hk/en/alerts_detail.php?id=1465 Thu, 23 Jan 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-01-13): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1464 https://www.govcert.gov.hk/en/alerts_detail.php?id=1464 Thu, 23 Jan 2025 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A25-01-12): Multiple Vulnerabilities in Oracle Java and Oracle Products (January 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1463 https://www.govcert.gov.hk/en/alerts_detail.php?id=1463 Wed, 22 Jan 2025 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A25-01-11): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1462 https://www.govcert.gov.hk/en/alerts_detail.php?id=1462 Mon, 20 Jan 2025 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A25-01-10): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1461 https://www.govcert.gov.hk/en/alerts_detail.php?id=1461 Fri, 17 Jan 2025 12:00:00 +0800 Ivanti has released security advisories to address multiple vulnerabilities in Ivanti products.

]]> Security Alert (A25-01-09): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1460 https://www.govcert.gov.hk/en/alerts_detail.php?id=1460 Wed, 15 Jan 2025 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A25-01-08): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1459 https://www.govcert.gov.hk/en/alerts_detail.php?id=1459 Wed, 15 Jan 2025 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> High Threat Security Alert (A25-01-07): Multiple Vulnerabilities in Microsoft Products (January 2025) https://www.govcert.gov.hk/en/alerts_detail.php?id=1458 https://www.govcert.gov.hk/en/alerts_detail.php?id=1458 Wed, 15 Jan 2025 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A25-01-06): Multiple Vulnerabilities in Juniper Networks Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1457 https://www.govcert.gov.hk/en/alerts_detail.php?id=1457 Thu, 09 Jan 2025 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Junos OS, Junos OS Evolved and Junos Space.

]]> High Threat Security Alert (A25-01-05): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1456 https://www.govcert.gov.hk/en/alerts_detail.php?id=1456 Thu, 09 Jan 2025 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems.

]]> High Threat Security Alert (A25-01-04): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1455 https://www.govcert.gov.hk/en/alerts_detail.php?id=1455 Thu, 09 Jan 2025 12:00:00 +0800 Ivanti has released a security advisory to address multiple vulnerabilities in Ivanti products.

]]> Security Alert (A25-01-03): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1454 https://www.govcert.gov.hk/en/alerts_detail.php?id=1454 Wed, 08 Jan 2025 12:00:00 +0800 Mozilla has published the advisories (MFSA2025-01, MFSA2025-02 and MFSA2025-03) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A25-01-02): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1453 https://www.govcert.gov.hk/en/alerts_detail.php?id=1453 Wed, 08 Jan 2025 12:00:00 +0800 Google released a security update to address vulnerability in Google Chrome.

]]> Security Alert (A25-01-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1452 https://www.govcert.gov.hk/en/alerts_detail.php?id=1452 Tue, 07 Jan 2025 12:00:00 +0800 Google has released Android Security Bulletin January 2025 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A24-12-18): Vulnerability in Palo Alto Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1451 https://www.govcert.gov.hk/en/alerts_detail.php?id=1451 Mon, 30 Dec 2024 12:00:00 +0800 Palo Alto has published a security advisory to address a vulnerability in PAN-OS.

]]> High Threat Security Alert (A24-12-17): Multiple Vulnerabilities in Sophos Firewall https://www.govcert.gov.hk/en/alerts_detail.php?id=1450 https://www.govcert.gov.hk/en/alerts_detail.php?id=1450 Mon, 23 Dec 2024 12:00:00 +0800 Sophos has published a security advisory to address multiple vulnerabilities in Sophos Firewall.

]]> Security Alert (A24-12-16): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1449 https://www.govcert.gov.hk/en/alerts_detail.php?id=1449 Fri, 20 Dec 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-12-15): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1448 https://www.govcert.gov.hk/en/alerts_detail.php?id=1448 Thu, 19 Dec 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-12-14): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1447 https://www.govcert.gov.hk/en/alerts_detail.php?id=1447 Wed, 18 Dec 2024 12:00:00 +0800 The Apache Software Foundation released security updates to address the vulnerabilities in the Apache Tomcat.

]]> High Threat Security Alert (A24-12-13): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=1446 https://www.govcert.gov.hk/en/alerts_detail.php?id=1446 Tue, 17 Dec 2024 12:00:00 +0800 The Apache Software Foundation has released a security bulletin to address the vulnerability in Apache Struts.

]]> Security Alert (A24-12-12): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1445 https://www.govcert.gov.hk/en/alerts_detail.php?id=1445 Fri, 13 Dec 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-12-11): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1444 https://www.govcert.gov.hk/en/alerts_detail.php?id=1444 Thu, 12 Dec 2024 12:00:00 +0800 Apple has released iOS 18.2, iPadOS 17.7.3 and iPadOS 18.2 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A24-12-10): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1443 https://www.govcert.gov.hk/en/alerts_detail.php?id=1443 Wed, 11 Dec 2024 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A24-12-09): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1442 https://www.govcert.gov.hk/en/alerts_detail.php?id=1442 Wed, 11 Dec 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-12-08): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1441 https://www.govcert.gov.hk/en/alerts_detail.php?id=1441 Wed, 11 Dec 2024 12:00:00 +0800 Ivanti has released security advisories to address multiple vulnerabilities in Ivanti products.

]]> High Threat Security Alert (A24-12-07): Multiple Vulnerabilities in Microsoft Products (December 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1440 https://www.govcert.gov.hk/en/alerts_detail.php?id=1440 Wed, 11 Dec 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A24-12-06): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1439 https://www.govcert.gov.hk/en/alerts_detail.php?id=1439 Mon, 09 Dec 2024 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A24-12-05): Multiple Vulnerabilities in SonicWall SMA 100 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1438 https://www.govcert.gov.hk/en/alerts_detail.php?id=1438 Fri, 06 Dec 2024 12:00:00 +0800 SonicWall released a security advisory to address multiple vulnerabilities in SMA 100 series products.

]]> Security Alert (A24-12-04): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1437 https://www.govcert.gov.hk/en/alerts_detail.php?id=1437 Fri, 06 Dec 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-12-03): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1436 https://www.govcert.gov.hk/en/alerts_detail.php?id=1436 Wed, 04 Dec 2024 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A24-12-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1435 https://www.govcert.gov.hk/en/alerts_detail.php?id=1435 Tue, 03 Dec 2024 12:00:00 +0800 Google has released Android Security Bulletin December 2024 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A24-12-01): Multiple Vulnerabilities in Synology DiskStation Manager https://www.govcert.gov.hk/en/alerts_detail.php?id=1434 https://www.govcert.gov.hk/en/alerts_detail.php?id=1434 Mon, 02 Dec 2024 12:00:00 +0800 Synology has published a security advisory to address multiple vulnerabilities in various versions of DiskStation Manager (DSM).

]]> Security Alert (A24-11-22): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1433 https://www.govcert.gov.hk/en/alerts_detail.php?id=1433 Wed, 27 Nov 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-63, MFSA2024-64 and MFSA2024-65) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-11-21): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=1432 https://www.govcert.gov.hk/en/alerts_detail.php?id=1432 Mon, 25 Nov 2024 12:00:00 +0800 Drupal published security advisories to address multiple vulnerabilities in the Drupal products.

]]> Security Alert (A24-11-20): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1431 https://www.govcert.gov.hk/en/alerts_detail.php?id=1431 Mon, 25 Nov 2024 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A24-11-19): Multiple Vulnerabilities in PHP https://www.govcert.gov.hk/en/alerts_detail.php?id=1430 https://www.govcert.gov.hk/en/alerts_detail.php?id=1430 Mon, 25 Nov 2024 12:00:00 +0800 PHP has released security advisories to address multiple vulnerabilities in PHP.

]]> Security Alert (A24-11-18): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1429 https://www.govcert.gov.hk/en/alerts_detail.php?id=1429 Mon, 25 Nov 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-11-17): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1428 https://www.govcert.gov.hk/en/alerts_detail.php?id=1428 Wed, 20 Nov 2024 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> High Threat Security Alert (A24-11-16): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1427 https://www.govcert.gov.hk/en/alerts_detail.php?id=1427 Wed, 20 Nov 2024 12:00:00 +0800 Apple has released iOS 17.7.2, iOS 18.1.1, iPadOS 17.7.2, iPadOS 18.1.1, macOS Sequoia 15.1.1 and Safari 18.1.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A24-11-15): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1426 https://www.govcert.gov.hk/en/alerts_detail.php?id=1426 Tue, 19 Nov 2024 12:00:00 +0800 The Apache Software Foundation released security updates to address the vulnerabilities in the Apache Tomcat.

]]> High Threat Security Alert (A24-11-14): Multiple Vulnerabilities in Palo Alto Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1425 https://www.govcert.gov.hk/en/alerts_detail.php?id=1425 Tue, 19 Nov 2024 12:00:00 +0800 Palo Alto has published security advisories to address multiple vulnerabilities in PAN-OS.

]]> Security Alert (A24-11-13): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1424 https://www.govcert.gov.hk/en/alerts_detail.php?id=1424 Mon, 18 Nov 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-11-12): Multiple Vulnerabilities in Palo Alto Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1423 https://www.govcert.gov.hk/en/alerts_detail.php?id=1423 Mon, 18 Nov 2024 12:00:00 +0800 Palo Alto has published security advisories to address multiple vulnerabilities in PAN-OS.

]]> Security Alert (A24-11-11): Multiple Vulnerabilities in Citrix Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1422 https://www.govcert.gov.hk/en/alerts_detail.php?id=1422 Wed, 13 Nov 2024 12:00:00 +0800 Citrix released security advisories to address multiple vulnerabilities in Citrix products.

]]> Security Alert (A24-11-10): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1421 https://www.govcert.gov.hk/en/alerts_detail.php?id=1421 Wed, 13 Nov 2024 12:00:00 +0800 Ivanti has released a security advisory to address multiple vulnerabilities in Ivanti products.

]]> Security Alert (A24-11-09): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1420 https://www.govcert.gov.hk/en/alerts_detail.php?id=1420 Wed, 13 Nov 2024 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A24-11-08): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1419 https://www.govcert.gov.hk/en/alerts_detail.php?id=1419 Wed, 13 Nov 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-11-07): Multiple Vulnerabilities in Microsoft Products (November 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1418 https://www.govcert.gov.hk/en/alerts_detail.php?id=1418 Wed, 13 Nov 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A24-11-06): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1417 https://www.govcert.gov.hk/en/alerts_detail.php?id=1417 Fri, 08 Nov 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-11-05): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1416 https://www.govcert.gov.hk/en/alerts_detail.php?id=1416 Thu, 07 Nov 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-11-04): Multiple Vulnerabilities in Synology Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1415 https://www.govcert.gov.hk/en/alerts_detail.php?id=1415 Wed, 06 Nov 2024 12:00:00 +0800 Synology has published security advisories to address multiple vulnerabilities in Synology products.

]]> Security Alert (A24-11-03): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1414 https://www.govcert.gov.hk/en/alerts_detail.php?id=1414 Wed, 06 Nov 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-11-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1413 https://www.govcert.gov.hk/en/alerts_detail.php?id=1413 Tue, 05 Nov 2024 12:00:00 +0800 Google has released Android Security Bulletin November 2024 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A24-11-01): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1412 https://www.govcert.gov.hk/en/alerts_detail.php?id=1412 Fri, 01 Nov 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-10-28): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1411 https://www.govcert.gov.hk/en/alerts_detail.php?id=1411 Thu, 31 Oct 2024 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A24-10-27): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1410 https://www.govcert.gov.hk/en/alerts_detail.php?id=1410 Wed, 30 Oct 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-55, MFSA2024-56 and MFSA2024-57) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-10-26): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1409 https://www.govcert.gov.hk/en/alerts_detail.php?id=1409 Wed, 30 Oct 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-10-25): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1408 https://www.govcert.gov.hk/en/alerts_detail.php?id=1408 Tue, 29 Oct 2024 12:00:00 +0800 Apple has released iOS 17.7.1, iOS 18.1, iPadOS 17.7.1 and iPadOS 18.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A24-10-24): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1407 https://www.govcert.gov.hk/en/alerts_detail.php?id=1407 Fri, 25 Oct 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-10-23): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1406 https://www.govcert.gov.hk/en/alerts_detail.php?id=1406 Thu, 24 Oct 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A24-10-22): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1405 https://www.govcert.gov.hk/en/alerts_detail.php?id=1405 Thu, 24 Oct 2024 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A24-10-21): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1404 https://www.govcert.gov.hk/en/alerts_detail.php?id=1404 Wed, 23 Oct 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-10-20): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1403 https://www.govcert.gov.hk/en/alerts_detail.php?id=1403 Fri, 18 Oct 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-10-19): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1402 https://www.govcert.gov.hk/en/alerts_detail.php?id=1402 Wed, 16 Oct 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-10-18): Multiple Vulnerabilities in Oracle Java and Oracle Products (October 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1401 https://www.govcert.gov.hk/en/alerts_detail.php?id=1401 Wed, 16 Oct 2024 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A24-10-17): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1400 https://www.govcert.gov.hk/en/alerts_detail.php?id=1400 Tue, 15 Oct 2024 12:00:00 +0800 Mozilla has published an advisory (MFSA2024-53) to address a vulnerability in Firefox browser.

]]> Security Alert (A24-10-16): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1399 https://www.govcert.gov.hk/en/alerts_detail.php?id=1399 Mon, 14 Oct 2024 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems.

]]> Security Alert (A24-10-15): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1398 https://www.govcert.gov.hk/en/alerts_detail.php?id=1398 Mon, 14 Oct 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-10-14): Multiple Vulnerabilities in GitLab https://www.govcert.gov.hk/en/alerts_detail.php?id=1397 https://www.govcert.gov.hk/en/alerts_detail.php?id=1397 Mon, 14 Oct 2024 12:00:00 +0800 GitLab has released 17.2.9, 17.3.5 and 17.4.2 to address multiple vulnerabilities in various versions of GitLab.

]]> Security Alert (A24-10-13): Multiple Vulnerabilities in Juniper Networks Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1396 https://www.govcert.gov.hk/en/alerts_detail.php?id=1396 Thu, 10 Oct 2024 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Junos OS, Junos OS Evolved and Junos Space.

]]> Security Alert (A24-10-12): Vulnerability in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1395 https://www.govcert.gov.hk/en/alerts_detail.php?id=1395 Thu, 10 Oct 2024 12:00:00 +0800 Ivanti has released a security advisory to address a vulnerability in Ivanti products.

]]> Security Alert (A24-10-11): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1394 https://www.govcert.gov.hk/en/alerts_detail.php?id=1394 Thu, 10 Oct 2024 12:00:00 +0800 Apple has released iOS 18.0.1 and iPadOS 18.0.1 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A24-10-10): Multiple Vulnerabilities in Palo Alto Networks Expedition https://www.govcert.gov.hk/en/alerts_detail.php?id=1393 https://www.govcert.gov.hk/en/alerts_detail.php?id=1393 Thu, 10 Oct 2024 12:00:00 +0800 Palo Alto Networks has published a security advisory to address multiple vulnerabilities in Expedition.

]]> High Threat Security Alert (A24-10-09): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1392 https://www.govcert.gov.hk/en/alerts_detail.php?id=1392 Thu, 10 Oct 2024 12:00:00 +0800 Mozilla has published an advisory (MFSA2024-51) to address a vulnerability in Firefox browser.

]]> Security Alert (A24-10-08): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1391 https://www.govcert.gov.hk/en/alerts_detail.php?id=1391 Wed, 09 Oct 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-10-07): Multiple Vulnerabilities in Microsoft Products (October 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1390 https://www.govcert.gov.hk/en/alerts_detail.php?id=1390 Wed, 09 Oct 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A24-10-06): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1389 https://www.govcert.gov.hk/en/alerts_detail.php?id=1389 Tue, 08 Oct 2024 12:00:00 +0800 Google has released Android Security Bulletin October 2024 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A24-10-05): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1388 https://www.govcert.gov.hk/en/alerts_detail.php?id=1388 Mon, 07 Oct 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-10-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1387 https://www.govcert.gov.hk/en/alerts_detail.php?id=1387 Thu, 03 Oct 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-10-03): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1386 https://www.govcert.gov.hk/en/alerts_detail.php?id=1386 Thu, 03 Oct 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-10-02): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1385 https://www.govcert.gov.hk/en/alerts_detail.php?id=1385 Wed, 02 Oct 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-46, MFSA2024-47 and MFSA2024-48) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A24-10-01): Vulnerability in Juniper Networks Junos OS and Junos OS Evolved https://www.govcert.gov.hk/en/alerts_detail.php?id=1384 https://www.govcert.gov.hk/en/alerts_detail.php?id=1384 Wed, 02 Oct 2024 12:00:00 +0800 Juniper Networks has published security advisory to address a vulnerability in Junos OS and Junos OS Evolved.

]]> Security Alert (A24-09-23): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1383 https://www.govcert.gov.hk/en/alerts_detail.php?id=1383 Mon, 30 Sep 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-09-22): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1382 https://www.govcert.gov.hk/en/alerts_detail.php?id=1382 Thu, 26 Sep 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-09-21): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1381 https://www.govcert.gov.hk/en/alerts_detail.php?id=1381 Thu, 26 Sep 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-09-20): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1380 https://www.govcert.gov.hk/en/alerts_detail.php?id=1380 Fri, 20 Sep 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-09-19): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1379 https://www.govcert.gov.hk/en/alerts_detail.php?id=1379 Thu, 19 Sep 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-09-18): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1378 https://www.govcert.gov.hk/en/alerts_detail.php?id=1378 Thu, 19 Sep 2024 12:00:00 +0800 Apple has released iOS 17.7, iOS 18, iPadOS 17.7 and iPadOS 18 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A24-09-17): Vulnerability in GitLab https://www.govcert.gov.hk/en/alerts_detail.php?id=1377 https://www.govcert.gov.hk/en/alerts_detail.php?id=1377 Thu, 19 Sep 2024 12:00:00 +0800 GitLab has released 16.11.10, 17.0.8, 17.1.8, 17.2.7 and 17.3.3 to address a security restriction bypass vulnerability in various versions of GitLab.

]]> High Threat Security Alert (A24-09-16): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1376 https://www.govcert.gov.hk/en/alerts_detail.php?id=1376 Thu, 19 Sep 2024 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A24-09-15): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1375 https://www.govcert.gov.hk/en/alerts_detail.php?id=1375 Fri, 13 Sep 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-09-14): Multiple Vulnerabilities in GitLab https://www.govcert.gov.hk/en/alerts_detail.php?id=1374 https://www.govcert.gov.hk/en/alerts_detail.php?id=1374 Fri, 13 Sep 2024 12:00:00 +0800 GitLab has released 17.1.7, 17.2.5 and 17.3.2 to address multiple vulnerabilities in various versions of GitLab.

]]> Security Alert (A24-09-13): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1373 https://www.govcert.gov.hk/en/alerts_detail.php?id=1373 Thu, 12 Sep 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-09-12): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1372 https://www.govcert.gov.hk/en/alerts_detail.php?id=1372 Wed, 11 Sep 2024 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> High Threat Security Alert (A24-09-11): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1371 https://www.govcert.gov.hk/en/alerts_detail.php?id=1371 Wed, 11 Sep 2024 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A24-09-10): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1370 https://www.govcert.gov.hk/en/alerts_detail.php?id=1370 Wed, 11 Sep 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-09-09): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1369 https://www.govcert.gov.hk/en/alerts_detail.php?id=1369 Wed, 11 Sep 2024 12:00:00 +0800 Ivanti has released security advisories to address multiple vulnerabilities in Ivanti products.

]]> High Threat Security Alert (A24-09-08): Multiple Vulnerabilities in Microsoft Products (September 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1368 https://www.govcert.gov.hk/en/alerts_detail.php?id=1368 Wed, 11 Sep 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A24-09-07): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1367 https://www.govcert.gov.hk/en/alerts_detail.php?id=1367 Mon, 09 Sep 2024 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A24-09-06): Vulnerability in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=1366 https://www.govcert.gov.hk/en/alerts_detail.php?id=1366 Thu, 05 Sep 2024 12:00:00 +0800 OpenSSL has released 3.0.15, 3.1.7, 3.2.3 and 3.3.2 to fix the vulnerability in various versions of OpenSSL.

]]> Security Alert (A24-09-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1365 https://www.govcert.gov.hk/en/alerts_detail.php?id=1365 Thu, 05 Sep 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-39, MFSA2024-40 and MFSA2024-41) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-09-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1364 https://www.govcert.gov.hk/en/alerts_detail.php?id=1364 Thu, 05 Sep 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-09-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1363 https://www.govcert.gov.hk/en/alerts_detail.php?id=1363 Wed, 04 Sep 2024 12:00:00 +0800 Google has released Android Security Bulletin September 2024 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A24-09-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1362 https://www.govcert.gov.hk/en/alerts_detail.php?id=1362 Wed, 04 Sep 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-09-01): Vulnerability in VMware Fusion https://www.govcert.gov.hk/en/alerts_detail.php?id=1361 https://www.govcert.gov.hk/en/alerts_detail.php?id=1361 Wed, 04 Sep 2024 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware Fusion.

]]> Security Alert (A24-08-15): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1360 https://www.govcert.gov.hk/en/alerts_detail.php?id=1360 Thu, 29 Aug 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-08-14): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1359 https://www.govcert.gov.hk/en/alerts_detail.php?id=1359 Thu, 29 Aug 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-08-13): Vulnerability in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1358 https://www.govcert.gov.hk/en/alerts_detail.php?id=1358 Fri, 23 Aug 2024 12:00:00 +0800 SonicWall released a security advisory to address a vulnerability in SonicWall systems.

]]> High Threat Security Alert (A24-08-12): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1357 https://www.govcert.gov.hk/en/alerts_detail.php?id=1357 Fri, 23 Aug 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-08-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1356 https://www.govcert.gov.hk/en/alerts_detail.php?id=1356 Thu, 22 Aug 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-08-10): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1355 https://www.govcert.gov.hk/en/alerts_detail.php?id=1355 Thu, 22 Aug 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-08-09): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1354 https://www.govcert.gov.hk/en/alerts_detail.php?id=1354 Fri, 16 Aug 2024 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A24-08-08): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1353 https://www.govcert.gov.hk/en/alerts_detail.php?id=1353 Wed, 14 Aug 2024 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A24-08-07): Multiple Vulnerabilities in Microsoft Products (August 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1352 https://www.govcert.gov.hk/en/alerts_detail.php?id=1352 Wed, 14 Aug 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A24-08-06): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1351 https://www.govcert.gov.hk/en/alerts_detail.php?id=1351 Fri, 09 Aug 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-08-05): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1350 https://www.govcert.gov.hk/en/alerts_detail.php?id=1350 Thu, 08 Aug 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A24-08-04): Multiple Vulnerabilities in Microsoft Windows https://www.govcert.gov.hk/en/alerts_detail.php?id=1349 https://www.govcert.gov.hk/en/alerts_detail.php?id=1349 Thu, 08 Aug 2024 12:00:00 +0800 Microsoft has released out-of-band security advisories to address the vulnerabilities in Microsoft Windows and Server.

]]> Security Alert (A24-08-03): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1348 https://www.govcert.gov.hk/en/alerts_detail.php?id=1348 Wed, 07 Aug 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-33, MFSA2024-34 and MFSA2024-35) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-08-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1347 https://www.govcert.gov.hk/en/alerts_detail.php?id=1347 Wed, 07 Aug 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-08-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1346 https://www.govcert.gov.hk/en/alerts_detail.php?id=1346 Wed, 07 Aug 2024 12:00:00 +0800 Google has released Android Security Bulletin August 2024 to address multiple vulnerabilities in Android operating system.

]]> Security Alert (A24-07-26): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1345 https://www.govcert.gov.hk/en/alerts_detail.php?id=1345 Fri, 02 Aug 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-07-25): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1344 https://www.govcert.gov.hk/en/alerts_detail.php?id=1344 Wed, 31 Jul 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-07-24): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1343 https://www.govcert.gov.hk/en/alerts_detail.php?id=1343 Tue, 30 Jul 2024 12:00:00 +0800 Apple has released iOS 16.7.9, iOS 17.6, iPadOS 16.7.9 and iPadOS 17.6 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A24-07-23): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1342 https://www.govcert.gov.hk/en/alerts_detail.php?id=1342 Fri, 26 Jul 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-07-22): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1341 https://www.govcert.gov.hk/en/alerts_detail.php?id=1341 Wed, 24 Jul 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-07-21): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1340 https://www.govcert.gov.hk/en/alerts_detail.php?id=1340 Fri, 19 Jul 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-07-20): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1339 https://www.govcert.gov.hk/en/alerts_detail.php?id=1339 Fri, 19 Jul 2024 12:00:00 +0800 Ivanti has released security advisories to address multiple vulnerabilities in Ivanti products.

]]> Security Alert (A24-07-19): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1338 https://www.govcert.gov.hk/en/alerts_detail.php?id=1338 Thu, 18 Jul 2024 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems.

]]> Security Alert (A24-07-18): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1337 https://www.govcert.gov.hk/en/alerts_detail.php?id=1337 Thu, 18 Jul 2024 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A24-07-17): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1336 https://www.govcert.gov.hk/en/alerts_detail.php?id=1336 Thu, 18 Jul 2024 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> High Threat Security Alert (A24-07-16): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1335 https://www.govcert.gov.hk/en/alerts_detail.php?id=1335 Thu, 18 Jul 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-07-15): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1334 https://www.govcert.gov.hk/en/alerts_detail.php?id=1334 Wed, 17 Jul 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-07-14): Multiple Vulnerabilities in Juniper Networks Junos OS and Junos OS Evolved https://www.govcert.gov.hk/en/alerts_detail.php?id=1333 https://www.govcert.gov.hk/en/alerts_detail.php?id=1333 Tue, 16 Jul 2024 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Junos OS and Junos OS Evolved.

]]> High Threat Security Alert (A24-07-13): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1332 https://www.govcert.gov.hk/en/alerts_detail.php?id=1332 Tue, 16 Jul 2024 12:00:00 +0800 Cisco released security advisories to address a remote code execution vulnerability (CVE-2024-6387) in Cisco devices and software.

]]> High Threat Security Alert (A24-07-12): Multiple Vulnerabilities in Palo Alto Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1331 https://www.govcert.gov.hk/en/alerts_detail.php?id=1331 Mon, 12 Jul 2024 12:00:00 +0800 Palo Alto has published security advisories to address multiple vulnerabilities in PAN-OS, Expedition and Cortex XDR Agent.

]]> High Threat Security Alert (A24-07-11): Vulnerability in RADIUS protocol https://www.govcert.gov.hk/en/alerts_detail.php?id=1330 https://www.govcert.gov.hk/en/alerts_detail.php?id=1330 Mon, 12 Jul 2024 12:00:00 +0800 A critical privilege escalation vulnerability (CVE-2024-3596) was found in RADIUS network authentication protocol.

]]> Security Alert (A24-07-10): Multiple Vulnerabilities in Juniper Networks Junos OS and Junos OS Evolved https://www.govcert.gov.hk/en/alerts_detail.php?id=1329 https://www.govcert.gov.hk/en/alerts_detail.php?id=1329 Thu, 11 Jul 2024 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Junos OS and Junos OS Evolved.

]]> High Threat Security Alert (A24-07-09): Multiple Vulnerabilities in GitLab https://www.govcert.gov.hk/en/alerts_detail.php?id=1328 https://www.govcert.gov.hk/en/alerts_detail.php?id=1328 Thu, 11 Jul 2024 12:00:00 +0800 GitLab has released 16.11.6, 17.0.4 and 17.1.2 to address multiple vulnerabilities in various versions of GitLab..

]]> Security Alert (A24-07-08): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1327 https://www.govcert.gov.hk/en/alerts_detail.php?id=1327 Wed, 10 Jul 2024 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A24-07-07): Multiple Vulnerabilities in Citrix Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1326 https://www.govcert.gov.hk/en/alerts_detail.php?id=1326 Wed, 10 Jul 2024 12:00:00 +0800 Citrix released security advisories to address multiple vulnerabilities in Citrix products.

]]> Security Alert (A24-07-06): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1325 https://www.govcert.gov.hk/en/alerts_detail.php?id=1325 Wed, 10 Jul 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-29 and MFSA2024-30) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A24-07-05): Multiple Vulnerabilities in Microsoft Products (July 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1324 https://www.govcert.gov.hk/en/alerts_detail.php?id=1324 Wed, 10 Jul 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A24-07-04): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1323 https://www.govcert.gov.hk/en/alerts_detail.php?id=1323 Thu, 04 Jul 2024 12:00:00 +0800 The Apache Software Foundation released security updates to address a vulnerability in the Apache Tomcat.

]]> Security Alert (A24-07-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1322 https://www.govcert.gov.hk/en/alerts_detail.php?id=1322 Wed, 03 Jul 2024 12:00:00 +0800 Google has released Android Security Bulletin July 2024 to address multiple vulnerabilities in Android operating system.

]]> High Threat Security Alert (A24-07-02): Vulnerability in OpenSSH https://www.govcert.gov.hk/en/alerts_detail.php?id=1321 https://www.govcert.gov.hk/en/alerts_detail.php?id=1321 Tue, 02 Jul 2024 12:00:00 +0800 OpenSSH has released a new version to address a vulnerability in various versions of OpenSSH.

]]> Security Alert (A24-07-01): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1320 https://www.govcert.gov.hk/en/alerts_detail.php?id=1320 Tue, 02 Jul 2024 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> High Threat Security Alert (A24-06-15): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1319 https://www.govcert.gov.hk/en/alerts_detail.php?id=1319 Fri, 28 Jun 2024 12:00:00 +0800 VMware has published security advisories to address multiple vulnerabilities in VMware products.

]]> Security Alert (A24-06-14): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1318 https://www.govcert.gov.hk/en/alerts_detail.php?id=1318 Fri, 28 Jun 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-06-13): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1317 https://www.govcert.gov.hk/en/alerts_detail.php?id=1317 Tue, 25 Jun 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-06-12): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1316 https://www.govcert.gov.hk/en/alerts_detail.php?id=1316 Fri, 21 Jun 2024 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall systems.

]]> Security Alert (A24-06-11): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1315 https://www.govcert.gov.hk/en/alerts_detail.php?id=1315 Fri, 21 Jun 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-06-10): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1314 https://www.govcert.gov.hk/en/alerts_detail.php?id=1314 Wed, 19 Jun 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-06-09): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1313 https://www.govcert.gov.hk/en/alerts_detail.php?id=1313 Wed, 19 Jun 2024 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A24-06-08): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1312 https://www.govcert.gov.hk/en/alerts_detail.php?id=1312 Fri, 14 Jun 2024 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A24-06-07): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1311 https://www.govcert.gov.hk/en/alerts_detail.php?id=1311 Fri, 14 Jun 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-06-06): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1310 https://www.govcert.gov.hk/en/alerts_detail.php?id=1310 Wed, 12 Jun 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-25 and MFSA2024-26) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-06-05): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1309 https://www.govcert.gov.hk/en/alerts_detail.php?id=1309 Wed, 12 Jun 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-06-04): Multiple Vulnerabilities in Microsoft Products (June 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1308 https://www.govcert.gov.hk/en/alerts_detail.php?id=1308 Wed, 12 Jun 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A24-06-03): Multiple Vulnerabilities in PHP https://www.govcert.gov.hk/en/alerts_detail.php?id=1307 https://www.govcert.gov.hk/en/alerts_detail.php?id=1307 Tue, 11 Jun 2024 12:00:00 +0800 PHP has released security advisories to address multiple vulnerabilities in PHP.

]]> Security Alert (A24-06-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1306 https://www.govcert.gov.hk/en/alerts_detail.php?id=1306 Wed, 05 Jun 2024 12:00:00 +0800 Google has released Android Security Bulletin June 2024 to address multiple vulnerabilities in Android operating system.

]]> Security Alert (A24-06-01): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1305 https://www.govcert.gov.hk/en/alerts_detail.php?id=1305 Tue, 04 Jun 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-05-24): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1304 https://www.govcert.gov.hk/en/alerts_detail.php?id=1304 Fri, 31 May 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-05-23): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1303 https://www.govcert.gov.hk/en/alerts_detail.php?id=1303 Mon, 27 May 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-05-22): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1302 https://www.govcert.gov.hk/en/alerts_detail.php?id=1302 Fri, 24 May 2024 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> High Threat Security Alert (A24-05-21): Multiple Vulnerabilities in Git https://www.govcert.gov.hk/en/alerts_detail.php?id=1301 https://www.govcert.gov.hk/en/alerts_detail.php?id=1301 Fri, 24 May 2024 12:00:00 +0800 Git has released security advisories to address multiple vulnerabilities in Git products.

]]> High Threat Security Alert (A24-05-20): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1300 https://www.govcert.gov.hk/en/alerts_detail.php?id=1300 Fri, 24 May 2024 12:00:00 +0800 Ivanti has released security advisories to address multiple vulnerabilities in Ivanti products.

]]> Security Alert (A24-05-19): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1299 https://www.govcert.gov.hk/en/alerts_detail.php?id=1299 Thu, 23 May 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-05-18): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1298 https://www.govcert.gov.hk/en/alerts_detail.php?id=1298 Wed, 22 May 2024 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A24-05-17): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1297 https://www.govcert.gov.hk/en/alerts_detail.php?id=1297 Wed, 22 May 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-05-16): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1296 https://www.govcert.gov.hk/en/alerts_detail.php?id=1296 Fri, 17 May 2024 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> High Threat Security Alert (A24-05-15): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1295 https://www.govcert.gov.hk/en/alerts_detail.php?id=1295 Fri, 17 May 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-05-14): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1294 https://www.govcert.gov.hk/en/alerts_detail.php?id=1294 Thu, 16 May 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-05-13): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1293 https://www.govcert.gov.hk/en/alerts_detail.php?id=1293 Thu, 16 May 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-21 and MFSA2024-22) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-05-12): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1292 https://www.govcert.gov.hk/en/alerts_detail.php?id=1292 Thu, 16 May 2024 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A24-05-11): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1291 https://www.govcert.gov.hk/en/alerts_detail.php?id=1291 Thu, 16 May 2024 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> High Threat Security Alert (A24-05-10): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1290 https://www.govcert.gov.hk/en/alerts_detail.php?id=1290 Thu, 16 May 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-05-09): Multiple Vulnerabilities in Microsoft Products (May 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1289 https://www.govcert.gov.hk/en/alerts_detail.php?id=1289 Thu, 16 May 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A24-05-08): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1288 https://www.govcert.gov.hk/en/alerts_detail.php?id=1288 Tue, 14 May 2024 12:00:00 +0800 Google released a security update to address the vulnerability in Google Chrome.

]]> High Threat Security Alert (A24-05-07): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1287 https://www.govcert.gov.hk/en/alerts_detail.php?id=1287 Tue, 14 May 2024 12:00:00 +0800 Apple has released iOS 16.7.8, iOS 17.5, iPadOS 16.7.8 and iPadOS 17.5 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A24-05-06): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1286 https://www.govcert.gov.hk/en/alerts_detail.php?id=1286 Mon, 13 May 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-05-05): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1285 https://www.govcert.gov.hk/en/alerts_detail.php?id=1285 Fri, 10 May 2024 12:00:00 +0800 Google released a security update to address the vulnerability in Google Chrome.

]]> Security Alert (A24-05-04): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1284 https://www.govcert.gov.hk/en/alerts_detail.php?id=1284 Wed, 08 May 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-05-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1283 https://www.govcert.gov.hk/en/alerts_detail.php?id=1283 Tue, 07 May 2024 12:00:00 +0800 Google has released Android Security Bulletin May 2024 to address multiple vulnerabilities in Android operating system.

]]> Security Alert (A24-05-02): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1282 https://www.govcert.gov.hk/en/alerts_detail.php?id=1282 Fri, 03 May 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-05-01): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1281 https://www.govcert.gov.hk/en/alerts_detail.php?id=1281 Thu, 02 May 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-04-20): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1280 https://www.govcert.gov.hk/en/alerts_detail.php?id=1280 Mon, 29 Apr 2024 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A24-04-19): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1279 https://www.govcert.gov.hk/en/alerts_detail.php?id=1279 Mon, 29 Apr 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-04-18): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1278 https://www.govcert.gov.hk/en/alerts_detail.php?id=1278 Thu, 25 Apr 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco products.

]]> Security Alert (A24-04-17): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1277 https://www.govcert.gov.hk/en/alerts_detail.php?id=1277 Thu, 25 Apr 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-04-16): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1276 https://www.govcert.gov.hk/en/alerts_detail.php?id=1276 Fri, 19 Apr 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-04-15): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1275 https://www.govcert.gov.hk/en/alerts_detail.php?id=1275 Thu, 18 Apr 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco products.

]]> Security Alert (A24-04-14): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1274 https://www.govcert.gov.hk/en/alerts_detail.php?id=1274 Wed, 17 Apr 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-18 and MFSA2024-19) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-04-13): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1273 https://www.govcert.gov.hk/en/alerts_detail.php?id=1273 Wed, 17 Apr 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-04-12): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1272 https://www.govcert.gov.hk/en/alerts_detail.php?id=1272 Wed, 17 Apr 2024 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A24-04-11): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1271 https://www.govcert.gov.hk/en/alerts_detail.php?id=1271 Mon, 15 Apr 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A24-04-10): Multiple Vulnerabilities in Palo Alto Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1270 https://www.govcert.gov.hk/en/alerts_detail.php?id=1270 Mon, 15 Apr 2024 12:00:00 +0800 Palo Alto has published security advisories to address multiple vulnerabilities in PAN-OS and Prisma Access.

]]> Security Alert (A24-04-09): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1269 https://www.govcert.gov.hk/en/alerts_detail.php?id=1269 Thu, 11 Apr 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-04-08): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1268 https://www.govcert.gov.hk/en/alerts_detail.php?id=1268 Wed, 10 Apr 2024 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> High Threat Security Alert (A24-04-07): Multiple Vulnerabilities in Microsoft Products (April 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1267 https://www.govcert.gov.hk/en/alerts_detail.php?id=1267 Wed, 10 Apr 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A24-04-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1266 https://www.govcert.gov.hk/en/alerts_detail.php?id=1266 Fri, 05 Apr 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco products.

]]> Security Alert (A24-04-05): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1265 https://www.govcert.gov.hk/en/alerts_detail.php?id=1265 Fri, 05 Apr 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-04-04): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1264 https://www.govcert.gov.hk/en/alerts_detail.php?id=1264 Fri, 05 Apr 2024 12:00:00 +0800 Ivanti has released a security advisory to address multiple vulnerabilities in Ivanti products.

]]> Security Alert (A24-04-03): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1263 https://www.govcert.gov.hk/en/alerts_detail.php?id=1263 Fri, 05 Apr 2024 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> Security Alert (A24-04-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1262 https://www.govcert.gov.hk/en/alerts_detail.php?id=1262 Wed, 03 Apr 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-04-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1261 https://www.govcert.gov.hk/en/alerts_detail.php?id=1261 Tue, 02 Apr 2024 12:00:00 +0800 Google has released Android Security Bulletin April 2024 to address multiple vulnerabilities in Android operating system.

]]> High Threat Security Alert (A24-03-24): Vulnerability in XZ Utils https://www.govcert.gov.hk/en/alerts_detail.php?id=1260 https://www.govcert.gov.hk/en/alerts_detail.php?id=1260 Tue, 02 Apr 2024 12:00:00 +0800 A malicious backdoor is found embedded in versions 5.6.0 and 5.6.1 of XZ Utils.

]]> Security Alert (A24-03-23): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1259 https://www.govcert.gov.hk/en/alerts_detail.php?id=1259 Thu, 28 Mar 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco products.

]]> Security Alert (A24-03-22): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1258 https://www.govcert.gov.hk/en/alerts_detail.php?id=1258 Thu, 28 Mar 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-03-21): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1257 https://www.govcert.gov.hk/en/alerts_detail.php?id=1257 Wed, 27 Mar 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-03-20): Vulnerability in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1256 https://www.govcert.gov.hk/en/alerts_detail.php?id=1256 Tue, 26 Mar 2024 12:00:00 +0800 Apple has released iOS 16.7.7, iOS 17.4.1, iPadOS 16.7.7 and iPadOS 17.4.1 to fix the vulnerability in various Apple devices.

]]> Security Alert (A24-03-19): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1255 https://www.govcert.gov.hk/en/alerts_detail.php?id=1255 Mon, 25 Mar 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-15 and MFSA2024-16) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-03-18): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1254 https://www.govcert.gov.hk/en/alerts_detail.php?id=1254 Mon, 25 Mar 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-03-17): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1253 https://www.govcert.gov.hk/en/alerts_detail.php?id=1253 Wed, 20 Mar 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-12 and MFSA2024-13) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-03-16): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1252 https://www.govcert.gov.hk/en/alerts_detail.php?id=1252 Wed, 20 Mar 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-03-15): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1251 https://www.govcert.gov.hk/en/alerts_detail.php?id=1251 Fri, 15 Mar 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-03-14): Multiple Vulnerabilities in Cisco IOS XR Software https://www.govcert.gov.hk/en/alerts_detail.php?id=1250 https://www.govcert.gov.hk/en/alerts_detail.php?id=1250 Thu, 14 Mar 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco IOS XR Software.

]]> Security Alert (A24-03-13): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1249 https://www.govcert.gov.hk/en/alerts_detail.php?id=1249 Thu, 14 Mar 2024 12:00:00 +0800 The Apache Software Foundation released security updates to address multiple vulnerabilities in the Apache Tomcat.

]]> Security Alert (A24-03-12): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1248 https://www.govcert.gov.hk/en/alerts_detail.php?id=1248 Wed, 13 Mar 2024 12:00:00 +0800 SonicWall released security advisories to address multiple vulnerabilities in SonicWall products.

]]> Security Alert (A24-03-11): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1247 https://www.govcert.gov.hk/en/alerts_detail.php?id=1247 Wed, 13 Mar 2024 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> High Threat Security Alert (A24-03-10): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1246 https://www.govcert.gov.hk/en/alerts_detail.php?id=1246 Wed, 13 Mar 2024 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> High Threat Security Alert (A24-03-09): Multiple Vulnerabilities in Microsoft Products (March 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1245 https://www.govcert.gov.hk/en/alerts_detail.php?id=1245 Wed, 13 Mar 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A24-03-08): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1244 https://www.govcert.gov.hk/en/alerts_detail.php?id=1244 Mon, 11 Mar 2024 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A24-03-07): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1243 https://www.govcert.gov.hk/en/alerts_detail.php?id=1243 Fri, 08 Mar 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-03-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1242 https://www.govcert.gov.hk/en/alerts_detail.php?id=1242 Thu, 07 Mar 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco products.

]]> Security Alert (A24-03-05): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1241 https://www.govcert.gov.hk/en/alerts_detail.php?id=1241 Tue, 06 Mar 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-03-04): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1240 https://www.govcert.gov.hk/en/alerts_detail.php?id=1240 Tue, 06 Mar 2024 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> High Threat Security Alert (A24-03-03): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1239 https://www.govcert.gov.hk/en/alerts_detail.php?id=1239 Tue, 06 Mar 2024 12:00:00 +0800 Apple has released iOS 16.7.6, iOS 17.4, iPadOS 16.7.6 and iPadOS 17.4 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A24-03-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1238 https://www.govcert.gov.hk/en/alerts_detail.php?id=1238 Tue, 05 Mar 2024 12:00:00 +0800 Google has released Android Security Bulletin March 2024 to address multiple vulnerabilities in Android operating system.

]]> Security Alert (A24-03-01): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1237 https://www.govcert.gov.hk/en/alerts_detail.php?id=1237 Fri, 01 Mar 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-02-18): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1236 https://www.govcert.gov.hk/en/alerts_detail.php?id=1236 Thu, 29 Feb 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco products.

]]> Security Alert (A24-02-17): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1235 https://www.govcert.gov.hk/en/alerts_detail.php?id=1235 Thu, 29 Feb 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-02-16): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1234 https://www.govcert.gov.hk/en/alerts_detail.php?id=1234 Wed, 28 Feb 2024 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware products.

]]> Security Alert (A24-02-15): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1233 https://www.govcert.gov.hk/en/alerts_detail.php?id=1233 Mon, 26 Feb 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-02-14): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1232 https://www.govcert.gov.hk/en/alerts_detail.php?id=1232 Wed, 21 Feb 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-05 and MFSA2024-06) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-02-13): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1231 https://www.govcert.gov.hk/en/alerts_detail.php?id=1231 Wed, 21 Feb 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-02-12): Multiple Vulnerabilities in Zoom Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1230 https://www.govcert.gov.hk/en/alerts_detail.php?id=1230 Thu, 15 Feb 2024 12:00:00 +0800 Zoom has published a security advisory to address multiple vulnerabilities in Zoom products.

]]> Security Alert (A24-02-11): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1229 https://www.govcert.gov.hk/en/alerts_detail.php?id=1229 Wed, 14 Feb 2024 12:00:00 +0800 Patches are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A24-02-10): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1228 https://www.govcert.gov.hk/en/alerts_detail.php?id=1228 Wed, 14 Feb 2024 12:00:00 +0800 QNAP has published a security advisory to address multiple vulnerabilities in QNAP products.

]]> High Threat Security Alert (A24-02-09): Multiple Vulnerabilities in Microsoft Products (February 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1227 https://www.govcert.gov.hk/en/alerts_detail.php?id=1227 Wed, 14 Feb 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A24-02-08): Vulnerability in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1226 https://www.govcert.gov.hk/en/alerts_detail.php?id=1226 Fri, 09 Feb 2024 12:00:00 +0800 Ivanti has published a security advisory to address a vulnerability in Ivanti systems.

]]> High Threat Security Alert (A24-02-07): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1225 https://www.govcert.gov.hk/en/alerts_detail.php?id=1225 Fri, 09 Feb 2024 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet systems.

]]> Security Alert (A24-02-06): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1224 https://www.govcert.gov.hk/en/alerts_detail.php?id=1224 Fri, 09 Feb 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-02-05): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1223 https://www.govcert.gov.hk/en/alerts_detail.php?id=1223 Thu, 08 Feb 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A24-02-04): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1222 https://www.govcert.gov.hk/en/alerts_detail.php?id=1222 Wed, 07 Feb 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-02-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1221 https://www.govcert.gov.hk/en/alerts_detail.php?id=1221 Wed, 07 Feb 2024 12:00:00 +0800 Google has released Android Security Bulletin February 2024 to fix multiple vulnerabilities in Android operating system.

]]> Security Alert (A24-02-02): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1220 https://www.govcert.gov.hk/en/alerts_detail.php?id=1220 Mon, 05 Feb 2024 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A24-02-01): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1219 https://www.govcert.gov.hk/en/alerts_detail.php?id=1219 Fri, 02 Feb 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-01-29): Multiple Vulnerabilities in Linux Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=1218 https://www.govcert.gov.hk/en/alerts_detail.php?id=1218 Wed, 31 Jan 2024 12:00:00 +0800 Multiple vulnerabilities are found in all versions of the Linux GNU C Library (glibc) from version 1.04 to the latest release version 2.38.

]]> Security Alert (A24-01-28): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1217 https://www.govcert.gov.hk/en/alerts_detail.php?id=1217 Wed, 31 Jan 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-01-27): Multiple Vulnerabilities in GitLab https://www.govcert.gov.hk/en/alerts_detail.php?id=1216 https://www.govcert.gov.hk/en/alerts_detail.php?id=1216 Wed, 31 Jan 2024 12:00:00 +0800 GitLab has released 16.5.8, 16.6.6, 16.7.4 and 16.8.1 to address multiple vulnerabilities in various versions of GitLab.

]]> Security Alert (A24-01-26): Multiple Vulnerabilities in Juniper Networks Junos OS and Junos OS Evolved https://www.govcert.gov.hk/en/alerts_detail.php?id=1215 https://www.govcert.gov.hk/en/alerts_detail.php?id=1215 Tue, 30 Jan 2024 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Junos OS and Junos OS Evolved.

]]> Security Alert (A24-01-25): Multiple Vulnerabilities in Synology DiskStation Manager https://www.govcert.gov.hk/en/alerts_detail.php?id=1214 https://www.govcert.gov.hk/en/alerts_detail.php?id=1214 Mon, 29 Jan 2024 12:00:00 +0800 Synology has published security advisories to address multiple vulnerabilities in various versions of DiskStation Manager (DSM).

]]> Security Alert (A24-01-24): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1213 https://www.govcert.gov.hk/en/alerts_detail.php?id=1213 Mon, 29 Jan 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-01-23): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1212 https://www.govcert.gov.hk/en/alerts_detail.php?id=1212 Thu, 25 Jan 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco products.

]]> Security Alert (A24-01-22): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1211 https://www.govcert.gov.hk/en/alerts_detail.php?id=1211 Wed, 24 Jan 2024 12:00:00 +0800 Mozilla has published the advisories (MFSA2024-01 and MFSA2024-02) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A24-01-21): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1210 https://www.govcert.gov.hk/en/alerts_detail.php?id=1210 Wed, 24 Jan 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-01-20): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1209 https://www.govcert.gov.hk/en/alerts_detail.php?id=1209 Tue, 23 Jan 2024 12:00:00 +0800 Apple has released iOS 15.8.1, iOS 16.7.5, iOS 17.3, iPadOS 15.8.1, iPadOS 16.7.5 and iPadOS 17.3 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A24-01-19): Vulnerability in Ivanti Endpoint Manager Mobile (MobileIron Core) https://www.govcert.gov.hk/en/alerts_detail.php?id=1208 https://www.govcert.gov.hk/en/alerts_detail.php?id=1208 Mon, 22 Jan 2024 12:00:00 +0800 Ivanti has published a security advisory to address a vulnerability in Ivanti Endpoint Manager Mobile.

]]> Security Alert (A24-01-18): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=1207 https://www.govcert.gov.hk/en/alerts_detail.php?id=1207 Thu, 18 Jan 2024 12:00:00 +0800 Drupal published a security advisory to address a vulnerability in the Drupal products.

]]> High Threat Security Alert (A24-01-17): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1206 https://www.govcert.gov.hk/en/alerts_detail.php?id=1206 Thu, 18 Jan 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-01-16): Multiple Vulnerabilities in Oracle Java and Oracle Products (January 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1205 https://www.govcert.gov.hk/en/alerts_detail.php?id=1205 Wed, 17 Jan 2024 12:00:00 +0800 Oracle released a Critical Patch Update (CPU) Advisory with collections of patches to address multiple vulnerabilities in Java SE and various Oracle products.

]]> High Threat Security Alert (A24-01-15): Vulnerability in VMware Aria Automation https://www.govcert.gov.hk/en/alerts_detail.php?id=1204 https://www.govcert.gov.hk/en/alerts_detail.php?id=1204 Wed, 17 Jan 2024 12:00:00 +0800 VMware published a security advisory to address a vulnerability in VMware Aria Automation.

]]> High Threat Security Alert (A24-01-14): Multiple Vulnerabilities in Citrix Product https://www.govcert.gov.hk/en/alerts_detail.php?id=1203 https://www.govcert.gov.hk/en/alerts_detail.php?id=1203 Wed, 17 Jan 2024 12:00:00 +0800 Citrix published security advisories to address multiple vulnerabilities in Citrix products.

]]> High Threat Security Alert (A24-01-13): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1202 https://www.govcert.gov.hk/en/alerts_detail.php?id=1202 Wed, 17 Jan 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A24-01-12): Multiple Vulnerabilities in GitLab https://www.govcert.gov.hk/en/alerts_detail.php?id=1201 https://www.govcert.gov.hk/en/alerts_detail.php?id=1201 Tue, 16 Jan 2024 12:00:00 +0800 GitLab has released 16.5.6, 16.6.4 and 16.7.2 to address multiple vulnerabilities in various versions of GitLab..

]]> High Threat Security Alert (A24-01-11): Multiple Vulnerabilities in Juniper Networks Junos OS and Junos OS Evolved https://www.govcert.gov.hk/en/alerts_detail.php?id=1200 https://www.govcert.gov.hk/en/alerts_detail.php?id=1200 Tue, 16 Jan 2024 12:00:00 +0800 Juniper Networks has published security advisories to address multiple vulnerabilities in Junos OS and Junos OS Evolved.

]]> Security Alert (A24-01-10): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1199 https://www.govcert.gov.hk/en/alerts_detail.php?id=1199 Fri, 12 Jan 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-01-09): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1198 https://www.govcert.gov.hk/en/alerts_detail.php?id=1198 Thu, 11 Jan 2024 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco products.

]]> High Threat Security Alert (A24-01-08): Multiple Vulnerabilities in Ivanti Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1197 https://www.govcert.gov.hk/en/alerts_detail.php?id=1197 Thu, 11 Jan 2024 12:00:00 +0800 Ivanti released a security advisory to address multiple vulnerabilities in Ivanti products.

]]> Security Alert (A24-01-07): Vulnerability in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1196 https://www.govcert.gov.hk/en/alerts_detail.php?id=1196 Wed, 10 Jan 2024 12:00:00 +0800 Fortinet released a security advisory to address a vulnerability in Fortinet products.

]]> Security Alert (A24-01-06): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1195 https://www.govcert.gov.hk/en/alerts_detail.php?id=1195 Wed, 10 Jan 2024 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A24-01-05): Multiple Vulnerabilities in Microsoft Products (January 2024) https://www.govcert.gov.hk/en/alerts_detail.php?id=1194 https://www.govcert.gov.hk/en/alerts_detail.php?id=1194 Wed, 10 Jan 2024 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A24-01-04): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1193 https://www.govcert.gov.hk/en/alerts_detail.php?id=1193 Mon, 08 Jan 2024 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A24-01-03): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1192 https://www.govcert.gov.hk/en/alerts_detail.php?id=1192 Mon, 08 Jan 2024 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A24-01-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1191 https://www.govcert.gov.hk/en/alerts_detail.php?id=1191 Thu, 04 Jan 2024 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A24-01-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1190 https://www.govcert.gov.hk/en/alerts_detail.php?id=1190 Thu, 04 Jan 2024 12:00:00 +0800 Google has released Android Security Bulletin January 2024 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A23-12-17): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1189 https://www.govcert.gov.hk/en/alerts_detail.php?id=1189 Fri, 22 Dec 2023 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> High Threat Security Alert (A23-12-16): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1188 https://www.govcert.gov.hk/en/alerts_detail.php?id=1188 Thu, 21 Dec 2023 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A23-12-15): Vulnerability in OpenSSH https://www.govcert.gov.hk/en/alerts_detail.php?id=1187 https://www.govcert.gov.hk/en/alerts_detail.php?id=1187 Wed, 20 Dec 2023 12:00:00 +0800 OpenSSH has released a new version to address a vulnerability in various versions of OpenSSH.

]]> Security Alert (A23-12-14): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1186 https://www.govcert.gov.hk/en/alerts_detail.php?id=1186 Wed, 20 Dec 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-54 and MFSA2023-56) to address multiple vulnerabilities in various versions of Firefox browser.

]]> Security Alert (A23-12-13): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1185 https://www.govcert.gov.hk/en/alerts_detail.php?id=1185 Mon, 18 Dec 2023 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> Security Alert (A23-12-12): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1184 https://www.govcert.gov.hk/en/alerts_detail.php?id=1184 Mon, 18 Dec 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-12-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1183 https://www.govcert.gov.hk/en/alerts_detail.php?id=1183 Wed, 13 Dec 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-12-10): Multiple Vulnerabilities in Microsoft Products (December 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1182 https://www.govcert.gov.hk/en/alerts_detail.php?id=1182 Wed, 13 Dec 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A23-12-09): Vulnerability in Bluetooth devices https://www.govcert.gov.hk/en/alerts_detail.php?id=1181 https://www.govcert.gov.hk/en/alerts_detail.php?id=1181 Tue, 12 Dec 2023 12:00:00 +0800 A vulnerability has been identified in various devices running different operating systems, including Android, Linux, iOS and macOS, while the Bluetooth functionality is enabled.

]]> High Threat Security Alert (A23-12-08): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1180 https://www.govcert.gov.hk/en/alerts_detail.php?id=1180 Tue, 12 Dec 2023 12:00:00 +0800 Apple has released iOS 16.7.3, iOS 17.2, iPadOS 16.7.3 and iPadOS 17.2 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A23-12-07): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1179 https://www.govcert.gov.hk/en/alerts_detail.php?id=1179 Mon, 11 Dec 2023 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A23-12-06): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1178 https://www.govcert.gov.hk/en/alerts_detail.php?id=1178 Fri, 08 Dec 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A23-12-05): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=1177 https://www.govcert.gov.hk/en/alerts_detail.php?id=1177 Thu, 07 Dec 2023 12:00:00 +0800 The Apache Software Foundation has released the security bulletins to address the vulnerability in Apache Struts.

]]> Security Alert (A23-12-04): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1176 https://www.govcert.gov.hk/en/alerts_detail.php?id=1176 Wed, 06 Dec 2023 12:00:00 +0800 Cisco released a security advisory to address a vulnerability in Cisco software.

]]> Security Alert (A23-12-03): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1175 https://www.govcert.gov.hk/en/alerts_detail.php?id=1175 Wed, 06 Dec 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-12-02): Multiple Vulnerabilities in SonicWall SMA 100 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1174 https://www.govcert.gov.hk/en/alerts_detail.php?id=1174 Tue, 05 Dec 2023 12:00:00 +0800 SonicWall has released a security advisory to address multiple vulnerabilities in SMA 100 series products.

]]> Security Alert (A23-12-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1173 https://www.govcert.gov.hk/en/alerts_detail.php?id=1173 Tue, 05 Dec 2023 12:00:00 +0800 Google has released Android Security Bulletin December 2023 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A23-11-22): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1172 https://www.govcert.gov.hk/en/alerts_detail.php?id=1172 Fri, 01 Dec 2023 12:00:00 +0800 Apple has released iOS 17.1.2 and iPadOS 17.1.2 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A23-11-21): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1171 https://www.govcert.gov.hk/en/alerts_detail.php?id=1171 Thu, 30 Nov 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-11-20): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1170 https://www.govcert.gov.hk/en/alerts_detail.php?id=1170 Wed, 29 Nov 2023 12:00:00 +0800 The Apache Software Foundation released a security update to address a vulnerability in the Apache Tomcat.

]]> High Threat Security Alert (A23-11-19): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1169 https://www.govcert.gov.hk/en/alerts_detail.php?id=1169 Wed, 29 Nov 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-11-18): Multiple Vulnerabilities in ownCloud https://www.govcert.gov.hk/en/alerts_detail.php?id=1168 https://www.govcert.gov.hk/en/alerts_detail.php?id=1168 Mon, 27 Nov 2023 12:00:00 +0800 ownCloud released the security advisories to address multiple vulnerabilities in ownCloud core, graphapi and oauth2 libraries.

]]> Security Alert (A23-11-17): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1167 https://www.govcert.gov.hk/en/alerts_detail.php?id=1167 Thu, 23 Nov 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-49 and MFSA2023-50) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A23-11-16): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1166 https://www.govcert.gov.hk/en/alerts_detail.php?id=1166 Fri, 17 Nov 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-11-15): Vulnerability in Intel Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1165 https://www.govcert.gov.hk/en/alerts_detail.php?id=1165 Thu, 16 Nov 2023 12:00:00 +0800 Intel has issued a security advisory (INTEL-SA-00950) to address a vulnerability in some Intel processors.

]]> Security Alert (A23-11-14): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1164 https://www.govcert.gov.hk/en/alerts_detail.php?id=1164 Thu, 16 Nov 2023 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> Security Alert (A23-11-13): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1163 https://www.govcert.gov.hk/en/alerts_detail.php?id=1163 Thu, 16 Nov 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-11-12): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1162 https://www.govcert.gov.hk/en/alerts_detail.php?id=1162 Wed, 15 Nov 2023 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A23-11-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1161 https://www.govcert.gov.hk/en/alerts_detail.php?id=1161 Wed, 15 Nov 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-11-10): Multiple Vulnerabilities in Microsoft Products (November 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1160 https://www.govcert.gov.hk/en/alerts_detail.php?id=1160 Wed, 15 Nov 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A23-11-09): Vulnerability in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1159 https://www.govcert.gov.hk/en/alerts_detail.php?id=1159 Mon, 13 Nov 2023 12:00:00 +0800 QNAP has published a security advisory to address a vulnerability in QNAP products.

]]> Security Alert (A23-11-08): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1158 https://www.govcert.gov.hk/en/alerts_detail.php?id=1158 Fri, 10 Nov 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-11-07): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1157 https://www.govcert.gov.hk/en/alerts_detail.php?id=1157 Thu, 09 Nov 2023 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A23-11-06): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1156 https://www.govcert.gov.hk/en/alerts_detail.php?id=1156 Tue, 07 Nov 2023 12:00:00 +0800 Google has released Android Security Bulletin November 2023 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A23-11-05): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1155 https://www.govcert.gov.hk/en/alerts_detail.php?id=1155 Mon, 06 Nov 2023 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A23-11-04): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1154 https://www.govcert.gov.hk/en/alerts_detail.php?id=1154 Mon, 06 Nov 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A23-11-03): Vulnerability in Apache ActiveMQ https://www.govcert.gov.hk/en/alerts_detail.php?id=1153 https://www.govcert.gov.hk/en/alerts_detail.php?id=1153 Fri, 03 Nov 2023 12:00:00 +0800 Apache Software Foundation has released a security advisory to address a vulnerability in Apache ActiveMQ.

]]> Security Alert (A23-11-02): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1152 https://www.govcert.gov.hk/en/alerts_detail.php?id=1152 Thu, 02 Nov 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-11-01): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1151 https://www.govcert.gov.hk/en/alerts_detail.php?id=1151 Wed, 01 Nov 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-10-28): Vulnerability in F5 BIG-IP https://www.govcert.gov.hk/en/alerts_detail.php?id=1150 https://www.govcert.gov.hk/en/alerts_detail.php?id=1150 Tue, 31 Oct 2023 12:00:00 +0800 F5 has published a security advisory to address a vulnerability in BIG-IP.

]]> Security Alert (A23-10-27): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1149 https://www.govcert.gov.hk/en/alerts_detail.php?id=1149 Mon, 30 Oct 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-10-26): Vulnerability in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=1148 https://www.govcert.gov.hk/en/alerts_detail.php?id=1148 Thu, 26 Oct 2023 12:00:00 +0800 OpenSSL has released 3.0.12 and 3.1.4 to fix the vulnerability in various versions of OpenSSL.

]]> Security Alert (A23-10-25): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1147 https://www.govcert.gov.hk/en/alerts_detail.php?id=1147 Thu, 26 Oct 2023 12:00:00 +0800 Apple has released iOS 15.8, iOS 16.7.2, iOS 17.1, iPadOS 15.8, iPadOS 16.7.2 and iPadOS 17.1 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A23-10-24): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1146 https://www.govcert.gov.hk/en/alerts_detail.php?id=1146 Thu, 26 Oct 2023 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A23-10-23): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1145 https://www.govcert.gov.hk/en/alerts_detail.php?id=1145 Wed, 25 Oct 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-45 and MFSA2023-46) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A23-10-22): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1144 https://www.govcert.gov.hk/en/alerts_detail.php?id=1144 Wed, 25 Oct 2023 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A23-10-21): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1143 https://www.govcert.gov.hk/en/alerts_detail.php?id=1143 Tue, 24 Oct 2023 12:00:00 +0800 VMware has published security advisories to address multiple vulnerabilities in VMware products.

]]> Security Alert (A23-10-20): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1142 https://www.govcert.gov.hk/en/alerts_detail.php?id=1142 Fri, 20 Oct 2023 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> Security Alert (A23-10-19): Multiple Vulnerabilities in Oracle Java and Oracle Products (October 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1141 https://www.govcert.gov.hk/en/alerts_detail.php?id=1141 Wed, 18 Oct 2023 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A23-10-18): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1140 https://www.govcert.gov.hk/en/alerts_detail.php?id=1140 Tue, 17 Oct 2023 12:00:00 +0800 SonicWall has released a security advisory to address multiple vulnerabilities in SonicOS which is the operating system for SonicWall firewalls.

]]> High Threat Security Alert (A23-10-17): Multiple Vulnerabilities in Cisco IOS XE Software https://www.govcert.gov.hk/en/alerts_detail.php?id=1139 https://www.govcert.gov.hk/en/alerts_detail.php?id=1139 Tue, 17 Oct 2023 12:00:00 +0800 Cisco released a security advisory to address multiple vulnerabilities in Cisco IOS XE Software.

]]> High Threat Security Alert (A23-10-16): Vulnerability in HTTP/2 protocol https://www.govcert.gov.hk/en/alerts_detail.php?id=1138 https://www.govcert.gov.hk/en/alerts_detail.php?id=1138 Mon, 16 Oct 2023 12:00:00 +0800 A vulnerability (CVE-2023-44487) was found in HTTP/2 protocol.

]]> Security Alert (A23-10-15): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1137 https://www.govcert.gov.hk/en/alerts_detail.php?id=1137 Mon, 16 Oct 2023 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A23-10-14): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1136 https://www.govcert.gov.hk/en/alerts_detail.php?id=1136 Mon, 16 Oct 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-10-13): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1135 https://www.govcert.gov.hk/en/alerts_detail.php?id=1135 Thu, 11 Oct 2023 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 devices.

]]> Security Alert (A23-10-12): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1134 https://www.govcert.gov.hk/en/alerts_detail.php?id=1134 Thu, 11 Oct 2023 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> High Threat Security Alert (A23-10-11): Multiple Vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway https://www.govcert.gov.hk/en/alerts_detail.php?id=1133 https://www.govcert.gov.hk/en/alerts_detail.php?id=1133 Thu, 11 Oct 2023 12:00:00 +0800 Citrix released a security advisory to address multiple vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway.

]]> Security Alert (A23-10-10): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1132 https://www.govcert.gov.hk/en/alerts_detail.php?id=1132 Thu, 11 Oct 2023 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the Apache Tomcat.

]]> Security Alert (A23-10-09): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1131 https://www.govcert.gov.hk/en/alerts_detail.php?id=1131 Thu, 11 Oct 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-10-08): Multiple Vulnerabilities in Microsoft Products (October 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1130 https://www.govcert.gov.hk/en/alerts_detail.php?id=1130 Thu, 11 Oct 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A23-10-07): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1129 https://www.govcert.gov.hk/en/alerts_detail.php?id=1129 Mon, 09 Oct 2023 12:00:00 +0800 QNAP has published a security advisory to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A23-10-06): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1128 https://www.govcert.gov.hk/en/alerts_detail.php?id=1128 Thu, 05 Oct 2023 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> High Threat Security Alert (A23-10-05): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1127 https://www.govcert.gov.hk/en/alerts_detail.php?id=1127 Thu, 05 Oct 2023 12:00:00 +0800 Apple has released iOS 17.0.3 and iPadOS 17.0.3 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A23-10-04): Vulnerability in Linux Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=1126 https://www.govcert.gov.hk/en/alerts_detail.php?id=1126 Wed, 04 Oct 2023 12:00:00 +0800 A local privilege escalation vulnerability is found in the Linux GNU C Library (glibc) version 2.34 while processing an environment variable called GLIBC_TUNABLES.

]]> Security Alert (A23-10-03): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1125 https://www.govcert.gov.hk/en/alerts_detail.php?id=1125 Wed, 04 Oct 2023 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A23-10-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1124 https://www.govcert.gov.hk/en/alerts_detail.php?id=1124 Tue, 03 Oct 2023 12:00:00 +0800 Google has released Android Security Bulletin October 2023 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A23-10-01): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1123 https://www.govcert.gov.hk/en/alerts_detail.php?id=1123 Tue, 03 Oct 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A23-09-23): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1122 https://www.govcert.gov.hk/en/alerts_detail.php?id=1122 Fri, 29 Sep 2023 12:00:00 +0800 Mozilla has published the advisory (MFSA2023-44) to address a vulnerability in Firefox browser.

]]> High Threat Security Alert (A23-09-22): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1121 https://www.govcert.gov.hk/en/alerts_detail.php?id=1121 Thu, 28 Sep 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-09-21): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1120 https://www.govcert.gov.hk/en/alerts_detail.php?id=1120 Thu, 28 Sep 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-09-20): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1119 https://www.govcert.gov.hk/en/alerts_detail.php?id=1119 Wed, 27 Sep 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-41 and MFSA2023-42) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A23-09-19): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1118 https://www.govcert.gov.hk/en/alerts_detail.php?id=1118 Mon, 22 Sep 2023 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A23-09-18): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=1117 https://www.govcert.gov.hk/en/alerts_detail.php?id=1117 Mon, 22 Sep 2023 12:00:00 +0800 Drupal has released a security advisory to address a vulnerability in the Drupal products.

]]> High Threat Security Alert (A23-09-17): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1116 https://www.govcert.gov.hk/en/alerts_detail.php?id=1116 Mon, 22 Sep 2023 12:00:00 +0800 Apple has released iOS 16.7, iOS 17.0.1, iPadOS 16.7 and iPadOS 17.0.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A23-09-16): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=1115 https://www.govcert.gov.hk/en/alerts_detail.php?id=1115 Wed, 20 Sep 2023 12:00:00 +0800 The Apache Software Foundation has released the security bulletins to address the vulnerability in Apache Struts.

]]> High Threat Security Alert (A23-09-15): Vulnerability in Trend Micro Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1114 https://www.govcert.gov.hk/en/alerts_detail.php?id=1114 Wed, 20 Sep 2023 12:00:00 +0800 Trend Micro has published a security advisory to address the vulnerability in Apex One and Worry-Free Business Security.

]]> High Threat Security Alert (A23-09-14): Multiple Vulnerabilities in Juniper Networks Junos OS https://www.govcert.gov.hk/en/alerts_detail.php?id=1113 https://www.govcert.gov.hk/en/alerts_detail.php?id=1113 Wed, 20 Sep 2023 12:00:00 +0800 Juniper Networks has published a security advisory to address multiple vulnerabilities in Junos OS on Juniper EX Series and SRX Series.

]]> Security Alert (A23-09-13): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1112 https://www.govcert.gov.hk/en/alerts_detail.php?id=1112 Mon, 18 Sep 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-09-12): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1111 https://www.govcert.gov.hk/en/alerts_detail.php?id=1111 Mon, 18 Sep 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-09-11): Vulnerability in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1110 https://www.govcert.gov.hk/en/alerts_detail.php?id=1110 Thu, 14 Sep 2023 12:00:00 +0800 Fortinet released a security advisory to address a vulnerability in Fortinet products.

]]> High Threat Security Alert (A23-09-10): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1109 https://www.govcert.gov.hk/en/alerts_detail.php?id=1109 Wed, 13 Sep 2023 12:00:00 +0800 Mozilla has published the advisory (MFSA2023-40) to address a vulnerability in Firefox browser.

]]> High Threat Security Alert (A23-09-09): Vulnerability in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1108 https://www.govcert.gov.hk/en/alerts_detail.php?id=1108 Wed, 13 Sep 2023 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address a vulnerability.

]]> High Threat Security Alert (A23-09-08): Multiple Vulnerabilities in Microsoft Products (September 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1107 https://www.govcert.gov.hk/en/alerts_detail.php?id=1107 Wed, 13 Sep 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A23-09-07): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1106 https://www.govcert.gov.hk/en/alerts_detail.php?id=1106 Tue, 12 Sep 2023 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A23-09-06): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1105 https://www.govcert.gov.hk/en/alerts_detail.php?id=1105 Mon, 11 Sep 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A23-09-05): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1104 https://www.govcert.gov.hk/en/alerts_detail.php?id=1104 Mon, 11 Sep 2023 12:00:00 +0800 Apple has released iOS 15.7.9, iOS 16.6.1, iPadOS 15.7.9 and iPadOS 16.6.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A23-09-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1103 https://www.govcert.gov.hk/en/alerts_detail.php?id=1103 Thu, 07 Sep 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-09-03): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1102 https://www.govcert.gov.hk/en/alerts_detail.php?id=1102 Wed, 06 Sep 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-09-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1101 https://www.govcert.gov.hk/en/alerts_detail.php?id=1101 Wed, 06 Sep 2023 12:00:00 +0800 Google has released Android Security Bulletin September 2023 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A23-09-01): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1100 https://www.govcert.gov.hk/en/alerts_detail.php?id=1100 Mon, 04 Sep 2023 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A23-08-20): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1099 https://www.govcert.gov.hk/en/alerts_detail.php?id=1099 Wed, 30 Aug 2023 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A23-08-19): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1098 https://www.govcert.gov.hk/en/alerts_detail.php?id=1098 Wed, 30 Aug 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-34, MFSA2023-35 and MFSA2023-36) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A23-08-18): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1097 https://www.govcert.gov.hk/en/alerts_detail.php?id=1097 Mon, 28 Aug 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-08-17): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1096 https://www.govcert.gov.hk/en/alerts_detail.php?id=1096 Mon, 28 Aug 2023 12:00:00 +0800 The Apache Software Foundation released a security update to address a vulnerability in the Apache Tomcat.

]]> Security Alert (A23-08-16): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1095 https://www.govcert.gov.hk/en/alerts_detail.php?id=1095 Fri, 25 Aug 2023 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> Security Alert (A23-08-15): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1094 https://www.govcert.gov.hk/en/alerts_detail.php?id=1094 Thu, 24 Aug 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-08-14): Vulnerability in WinRAR https://www.govcert.gov.hk/en/alerts_detail.php?id=1093 https://www.govcert.gov.hk/en/alerts_detail.php?id=1093 Wed, 23 Aug 2023 12:00:00 +0800 RARLAB has released a security update to fix a vulnerability in WinRAR.

]]> Security Alert (A23-08-13): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1092 https://www.govcert.gov.hk/en/alerts_detail.php?id=1092 Wed, 23 Aug 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-08-12): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1091 https://www.govcert.gov.hk/en/alerts_detail.php?id=1091 Tue, 22 Aug 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-08-11): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1090 https://www.govcert.gov.hk/en/alerts_detail.php?id=1090 Thu, 17 Aug 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-08-10): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1089 https://www.govcert.gov.hk/en/alerts_detail.php?id=1089 Wed, 16 Aug 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-08-09): Vulnerability in Fortinet FortiOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1088 https://www.govcert.gov.hk/en/alerts_detail.php?id=1088 Thu, 10 Aug 2023 12:00:00 +0800 Fortinet released a security advisory to address a vulnerability in Fortinet FortiOS.

]]> Security Alert (A23-08-08): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1087 https://www.govcert.gov.hk/en/alerts_detail.php?id=1087 Thu, 10 Aug 2023 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A23-08-07): Multiple Vulnerabilities in Microsoft Products (August 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1086 https://www.govcert.gov.hk/en/alerts_detail.php?id=1086 Thu, 10 Aug 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A23-08-06): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1085 https://www.govcert.gov.hk/en/alerts_detail.php?id=1085 Tue, 08 Aug 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-08-05): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1084 https://www.govcert.gov.hk/en/alerts_detail.php?id=1084 Tue, 08 Aug 2023 12:00:00 +0800 Google has released Android Security Bulletin August 2023 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A23-08-04): Multiple Vulnerabilities in VMware Horizon Server https://www.govcert.gov.hk/en/alerts_detail.php?id=1083 https://www.govcert.gov.hk/en/alerts_detail.php?id=1083 Mon, 07 Aug 2023 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware Horizon Server.

]]> Security Alert (A23-08-03): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1082 https://www.govcert.gov.hk/en/alerts_detail.php?id=1082 Thu, 03 Aug 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-08-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1081 https://www.govcert.gov.hk/en/alerts_detail.php?id=1081 Thu, 03 Aug 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-08-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1080 https://www.govcert.gov.hk/en/alerts_detail.php?id=1080 Wed, 02 Aug 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-29, MFSA2023-30 and MFSA2023-31) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A23-07-24): Vulnerability in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1079 https://www.govcert.gov.hk/en/alerts_detail.php?id=1079 Mon, 31 Jul 2023 12:00:00 +0800 QNAP has published a security advisory to address a vulnerability in QNAP products.

]]> High Threat Security Alert (A23-07-23): Vulnerability in Ivanti Endpoint Manager Mobile (MobileIron Core) https://www.govcert.gov.hk/en/alerts_detail.php?id=1078 https://www.govcert.gov.hk/en/alerts_detail.php?id=1078 Mon, 31 Jul 2023 12:00:00 +0800 Ivanti has published a security advisory to address a vulnerability in Ivanti Endpoint Manager Mobile.

]]> High Threat Security Alert (A23-07-22): Vulnerability in Ivanti Endpoint Manager Mobile (MobileIron Core) https://www.govcert.gov.hk/en/alerts_detail.php?id=1077 https://www.govcert.gov.hk/en/alerts_detail.php?id=1077 Wed, 26 Jul 2023 12:00:00 +0800 Ivanti has published a security advisory to address a vulnerability in Ivanti Endpoint Manager Mobile.

]]> Security Alert (A23-07-21): Vulnerability in OpenSSH https://www.govcert.gov.hk/en/alerts_detail.php?id=1076 https://www.govcert.gov.hk/en/alerts_detail.php?id=1076 Tue, 25 Jul 2023 12:00:00 +0800 OpenSSH has released 9.3p2 to fix a vulnerability in various versions of OpenSSH.

]]> High Threat Security Alert (A23-07-20): Multiple Vulnerabilities in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1075 https://www.govcert.gov.hk/en/alerts_detail.php?id=1075 Tue, 25 Jul 2023 12:00:00 +0800 Apple has released security updates to fix the vulnerabilities in macOS and Safari.

]]> High Threat Security Alert (A23-07-19): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1074 https://www.govcert.gov.hk/en/alerts_detail.php?id=1074 Tue, 25 Jul 2023 12:00:00 +0800 Apple has released iOS 15.7.8, iOS 16.6, iPadOS 15.7.8 and iPadOS 16.6 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A23-07-18): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1073 https://www.govcert.gov.hk/en/alerts_detail.php?id=1073 Mon, 24 Jul 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-07-17): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1072 https://www.govcert.gov.hk/en/alerts_detail.php?id=1072 Thu, 20 Jul 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-07-16): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1071 https://www.govcert.gov.hk/en/alerts_detail.php?id=1071 Wed, 19 Jul 2023 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A23-07-15): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1070 https://www.govcert.gov.hk/en/alerts_detail.php?id=1070 Wed, 19 Jul 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-07-14): Multiple Vulnerabilities in Citrix NetScaler Application Delivery Controller and Citrix NetScaler Gateway https://www.govcert.gov.hk/en/alerts_detail.php?id=1069 https://www.govcert.gov.hk/en/alerts_detail.php?id=1069 Wed, 19 Jul 2023 12:00:00 +0800 Citrix released a security advisory to address multiple vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway.

]]> Security Alert (A23-07-13): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1069 https://www.govcert.gov.hk/en/alerts_detail.php?id=1069 Fri, 14 Jul 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-07-12): Vulnerability in Cisco SD-WAN vManage https://www.govcert.gov.hk/en/alerts_detail.php?id=1067 https://www.govcert.gov.hk/en/alerts_detail.php?id=1067 Thu, 13 Jul 2023 12:00:00 +0800 Cisco released a security advisory to address a vulnerability in Cisco SD-WAN vManage.

]]> Security Alert (A23-07-11): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1066 https://www.govcert.gov.hk/en/alerts_detail.php?id=1066 Thu, 13 Jul 2023 12:00:00 +0800 SonicWall has released a security advisory to address multiple vulnerabilities in SonicWall Analytics and GMS products.

]]> Security Alert (A23-07-10): Multiple Vulnerabilities in Citrix Secure Access Client https://www.govcert.gov.hk/en/alerts_detail.php?id=1065 https://www.govcert.gov.hk/en/alerts_detail.php?id=1065 Wed, 12 Jul 2023 12:00:00 +0800 Citrix released security advisories to address multiple vulnerabilities in Citrix Secure Access Client.

]]> Security Alert (A23-07-09): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1064 https://www.govcert.gov.hk/en/alerts_detail.php?id=1064 Wed, 12 Jul 2023 12:00:00 +0800 Mozilla has published the advisory (MFSA2023-26) to address a vulnerability in Firefox browser.

]]> High Threat Security Alert (A23-07-08): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1063 https://www.govcert.gov.hk/en/alerts_detail.php?id=1063 Wed, 12 Jul 2023 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> High Threat Security Alert (A23-07-07): Multiple Vulnerabilities in Microsoft Products (July 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1062 https://www.govcert.gov.hk/en/alerts_detail.php?id=1062 Wed, 12 Jul 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A23-07-06): Vulnerability in Apple Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1061 https://www.govcert.gov.hk/en/alerts_detail.php?id=1061 Tue, 11 Jul 2023 12:00:00 +0800 Apple has released security updates to fix a vulnerability in macOS and Safari.

]]> Security Alert (A23-07-05): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1060 https://www.govcert.gov.hk/en/alerts_detail.php?id=1060 Fri, 07 Jul 2023 12:00:00 +0800 Google has released Android Security Bulletin July 2023 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A23-07-04): Vulnerability in Linux Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=1059 https://www.govcert.gov.hk/en/alerts_detail.php?id=1059 Fri, 07 Jul 2023 12:00:00 +0800 A local privilege escalation vulnerability is found in the Linux kernel 6.1 through 6.4.

]]> Security Alert (A23-07-03): Vulnerability in VMware SD-WAN Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1058 https://www.govcert.gov.hk/en/alerts_detail.php?id=1058 Fri, 07 Jul 2023 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware SD-WAN Edge.

]]> Security Alert (A23-07-02) Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1057 https://www.govcert.gov.hk/en/alerts_detail.php?id=1057 Thu, 06 Jul 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-07-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1056 https://www.govcert.gov.hk/en/alerts_detail.php?id=1056 Wed, 05 Jul 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-22 and MFSA2023-23) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A23-06-22): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1055 https://www.govcert.gov.hk/en/alerts_detail.php?id=1055 Fri, 30 Jun 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-06-21) Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1054 https://www.govcert.gov.hk/en/alerts_detail.php?id=1054 Tue, 27 Jun 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-06-20): Multiple Vulnerabilities in Fortinet FortiNAC https://www.govcert.gov.hk/en/alerts_detail.php?id=1053 https://www.govcert.gov.hk/en/alerts_detail.php?id=1053 Mon, 26 Jun 2023 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet FortiNAC.

]]> Security Alert (A23-06-19): Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1052 https://www.govcert.gov.hk/en/alerts_detail.php?id=1052 Fri, 23 Jun 2023 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A23-06-18): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1051 https://www.govcert.gov.hk/en/alerts_detail.php?id=1051 Fri, 23 Jun 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-06-17): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1050 https://www.govcert.gov.hk/en/alerts_detail.php?id=1050 Fri, 23 Jun 2023 12:00:00 +0800 The Apache Software Foundation released a security update to address a vulnerability in the Apache Tomcat.

]]> High Threat Security Alert (A23-06-16): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1049 https://www.govcert.gov.hk/en/alerts_detail.php?id=1049 Fri, 23 Jun 2023 12:00:00 +0800 Apple has released iOS 15.7.7, iOS 16.5.1, iPadOS 15.7.7 and iPadOS 16.5.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A23-06-15): Multiple Vulnerabilities in Synology DiskStation Manager https://www.govcert.gov.hk/en/alerts_detail.php?id=1048 https://www.govcert.gov.hk/en/alerts_detail.php?id=1048 Mon, 19 Jun 2023 12:00:00 +0800 Synology has published security advisories to address multiple vulnerabilities in various versions of DiskStation Manager (DSM).

]]> Security Alert (A23-06-14): Vulnerability in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1047 https://www.govcert.gov.hk/en/alerts_detail.php?id=1047 Mon, 19 Jun 2023 12:00:00 +0800 Fortinet released a security advisory to address a vulnerability in Fortinet products.

]]> Security Alert (A23-06-13): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1046 https://www.govcert.gov.hk/en/alerts_detail.php?id=1046 Mon, 19 Jun 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-06-12): Multiple Vulnerabilities in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=1045 https://www.govcert.gov.hk/en/alerts_detail.php?id=1045 Thu, 15 Jun 2023 12:00:00 +0800 The Apache Software Foundation has released the security bulletins to address the vulnerabilities in Apache Struts.

]]> Security Alert (A23-06-11): Vulnerability in VMware Tools https://www.govcert.gov.hk/en/alerts_detail.php?id=1044 https://www.govcert.gov.hk/en/alerts_detail.php?id=1044 Wed, 14 Jun 2023 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware Tools.

]]> Security Alert (A23-06-10): Multiple Vulnerabilities in Citrix Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1043 https://www.govcert.gov.hk/en/alerts_detail.php?id=1043 Wed, 14 Jun 2023 12:00:00 +0800 Citrix released security advisories to address multiple vulnerabilities in Citrix products.

]]> Security Alert (A23-06-09) Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1042 https://www.govcert.gov.hk/en/alerts_detail.php?id=1042 Wed, 14 Jun 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-06-08): Multiple Vulnerabilities in Microsoft Products (June 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1041 https://www.govcert.gov.hk/en/alerts_detail.php?id=1041 Wed, 14 Jun 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A23-06-07): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1040 https://www.govcert.gov.hk/en/alerts_detail.php?id=1040 Tue, 13 Jun 2023 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> High Threat Security Alert (A23-06-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1039 https://www.govcert.gov.hk/en/alerts_detail.php?id=1039 Thu, 08 Jun 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A23-06-05): Multiple Vulnerabilities in VMware Aria Operations for Networks https://www.govcert.gov.hk/en/alerts_detail.php?id=1038 https://www.govcert.gov.hk/en/alerts_detail.php?id=1038 Thu, 08 Jun 2023 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware Aria Operations for Networks.

]]> Security Alert (A23-06-04): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1037 https://www.govcert.gov.hk/en/alerts_detail.php?id=1037 Wed, 07 Jun 2023 12:00:00 +0800 Google has released Android Security Bulletin June 2023 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A23-06-03): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1036 https://www.govcert.gov.hk/en/alerts_detail.php?id=1036 Wed, 07 Jun 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-19 and MFSA2023-20) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A23-06-02): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1035 https://www.govcert.gov.hk/en/alerts_detail.php?id=1035 Wed, 07 Jun 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A23-06-01): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1034 https://www.govcert.gov.hk/en/alerts_detail.php?id=1034 Tue, 06 Jun 2023 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A23-05-15): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1033 https://www.govcert.gov.hk/en/alerts_detail.php?id=1033 Wed, 31 May 2023 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware products.

]]> Security Alert (A23-05-14): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1032 https://www.govcert.gov.hk/en/alerts_detail.php?id=1032 Wed, 31 May 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-05-13): Vulnerability in VMware NSX-T https://www.govcert.gov.hk/en/alerts_detail.php?id=1031 https://www.govcert.gov.hk/en/alerts_detail.php?id=1031 Wed, 24 May 2023 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware NSX-T.

]]> Security Alert (A23-05-12): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=1030 https://www.govcert.gov.hk/en/alerts_detail.php?id=1030 Tue, 23 May 2023 12:00:00 +0800 The Apache Software Foundation released a security update to address a vulnerability in the Apache Tomcat.

]]> Security Alert (A23-05-11): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1029 https://www.govcert.gov.hk/en/alerts_detail.php?id=1029 Fri, 19 May 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A23-05-10): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1028 https://www.govcert.gov.hk/en/alerts_detail.php?id=1028 Fri, 19 May 2023 12:00:00 +0800 Apple has released iOS 15.7.6, iOS 16.5, iPadOS 15.7.6 and iPadOS 16.5 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A23-05-09): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1027 https://www.govcert.gov.hk/en/alerts_detail.php?id=1027 Thu, 18 May 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-05-08): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1026 https://www.govcert.gov.hk/en/alerts_detail.php?id=1026 Wed, 17 May 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-05-07): Multiple Vulnerabilities in VMware Aria Operations https://www.govcert.gov.hk/en/alerts_detail.php?id=1025 https://www.govcert.gov.hk/en/alerts_detail.php?id=1025 Fri, 12 May 2023 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware Aria Operations.

]]> Security Alert (A23-05-06): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1024 https://www.govcert.gov.hk/en/alerts_detail.php?id=1024 Wed, 10 May 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-16 and MFSA2023-17) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A23-05-05): Multiple Vulnerabilities in Microsoft Products (May 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1023 https://www.govcert.gov.hk/en/alerts_detail.php?id=1023 Wed, 10 May 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A23-05-04): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1022 https://www.govcert.gov.hk/en/alerts_detail.php?id=1022 Mon, 08 May 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-05-03): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1021 https://www.govcert.gov.hk/en/alerts_detail.php?id=1021 Thu, 04 May 2023 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> Security Alert (A23-05-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1020 https://www.govcert.gov.hk/en/alerts_detail.php?id=1020 Wed, 03 May 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-05-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1019 https://www.govcert.gov.hk/en/alerts_detail.php?id=1019 Tue, 02 May 2023 12:00:00 +0800 Google has released Android Security Bulletin May 2023 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A23-04-19): Vulnerability in TP-Link Archer AX21 https://www.govcert.gov.hk/en/alerts_detail.php?id=1018 https://www.govcert.gov.hk/en/alerts_detail.php?id=1018 Wed, 26 Apr 2023 12:00:00 +0800 TP-Link released a security update to address a vulnerability in TP-Link Archer AX21.

]]> Security Alert (A23-04-18): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1017 https://www.govcert.gov.hk/en/alerts_detail.php?id=1017 Wed, 26 Apr 2023 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> High Threat Security Alert (A23-04-17): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1016 https://www.govcert.gov.hk/en/alerts_detail.php?id=1016 Mon, 24 Apr 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A23-04-16): Multiple Vulnerabilities in VMware Aria Operations for Logs https://www.govcert.gov.hk/en/alerts_detail.php?id=1015 https://www.govcert.gov.hk/en/alerts_detail.php?id=1015 Fri, 21 Apr 2023 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware Aria Operations for Logs.

]]> Security Alert (A23-04-15): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=1014 https://www.govcert.gov.hk/en/alerts_detail.php?id=1014 Thu, 20 Apr 2023 12:00:00 +0800 Drupal has released security advisories to address a vulnerability in the Drupal products.

]]> High Threat Security Alert (A23-04-14): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1013 https://www.govcert.gov.hk/en/alerts_detail.php?id=1013 Thu, 20 Apr 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-04-13): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1012 https://www.govcert.gov.hk/en/alerts_detail.php?id=1012 Wed, 19 Apr 2023 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> High Threat Security Alert (A23-04-12): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1011 https://www.govcert.gov.hk/en/alerts_detail.php?id=1011 Wed, 19 Apr 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-04-11): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1010 https://www.govcert.gov.hk/en/alerts_detail.php?id=1010 Mon, 17 Apr 2023 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> High Threat Security Alert (A23-04-10): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1009 https://www.govcert.gov.hk/en/alerts_detail.php?id=1009 Mon, 17 Apr 2023 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A23-04-09): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=1008 https://www.govcert.gov.hk/en/alerts_detail.php?id=1008 Wed, 12 Apr 2023 14:57:47 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A23-04-08): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=1007 https://www.govcert.gov.hk/en/alerts_detail.php?id=1007 Wed, 12 Apr 2023 14:56:05 Mozilla has published the advisories (MFSA2023-13 and MFSA2023-14) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A23-04-07): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1006 https://www.govcert.gov.hk/en/alerts_detail.php?id=1006 Wed, 12 Apr 2023 14:53:35 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> High Threat Security Alert (A23-04-06): Multiple Vulnerabilities in Microsoft Products (April 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=1005 https://www.govcert.gov.hk/en/alerts_detail.php?id=1005 Wed, 12 Apr 2023 14:53:28 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A23-04-05): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=1004 https://www.govcert.gov.hk/en/alerts_detail.php?id=1004 Tue, 11 Apr 2023 15:53:39 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A23-04-04): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=1003 https://www.govcert.gov.hk/en/alerts_detail.php?id=1003 Tue, 11 Apr 2023 15:53:32 +0800 Apple has released iOS 15.7.5, iOS 16.4.1, iPadOS 15.7.5 and iPadOS 16.4.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A23-04-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=1002 https://www.govcert.gov.hk/en/alerts_detail.php?id=1002 Thu, 06 Apr 2023 15:53:56 +0800 Google has released Android Security Bulletin April 2023 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A23-04-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=1001 https://www.govcert.gov.hk/en/alerts_detail.php?id=1001 Thu, 06 Apr 2023 15:53:52 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-04-01): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=1000 https://www.govcert.gov.hk/en/alerts_detail.php?id=1000 Thu, 06 Apr 2023 15:53:48 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-03-18): Multiple Vulnerabilities in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=999 https://www.govcert.gov.hk/en/alerts_detail.php?id=999 Thu, 30 Mar 2023 12:00:00 +0800 QNAP has published security advisories to address multiple vulnerabilities in QNAP products.

]]> High Threat Security Alert (A23-03-17): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=998 https://www.govcert.gov.hk/en/alerts_detail.php?id=998 Tue, 28 Mar 2023 12:00:00 +0800 Apple has released iOS 15.7.4, iOS 16.4, iPadOS 15.7.4 and iPadOS 16.4 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A23-03-16): Vulnerability in Microsoft Windows Snipping Tools https://www.govcert.gov.hk/en/alerts_detail.php?id=997 https://www.govcert.gov.hk/en/alerts_detail.php?id=997 Mon, 27 Mar 2023 12:00:00 +0800 Microsoft has released an out-of-band security update to address the vulnerability in Microsoft Windows Snipping Tools.

]]> Security Alert (A23-03-15): Vulnerability in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=996 https://www.govcert.gov.hk/en/alerts_detail.php?id=996 Mon, 27 Mar 2023 12:00:00 +0800 OpenSSL has released 1.1.1u, 3.0.9 and 3.1.1 to fix the vulnerability in various versions of OpenSSL.

]]> Security Alert (A23-03-14): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=995 https://www.govcert.gov.hk/en/alerts_detail.php?id=995 Mon, 27 Mar 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-03-13): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=994 https://www.govcert.gov.hk/en/alerts_detail.php?id=994 Thu, 23 Mar 2023 12:00:00 +0800 The Apache Software Foundation released a security update to address a vulnerability in the Apache Tomcat.

]]> Security Alert (A23-03-12): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=993 https://www.govcert.gov.hk/en/alerts_detail.php?id=993 Thu, 23 Mar 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-03-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=992 https://www.govcert.gov.hk/en/alerts_detail.php?id=992 Wed, 22 Mar 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-03-10): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=991 https://www.govcert.gov.hk/en/alerts_detail.php?id=991 Thu, 16 Mar 2023 12:00:00 +0800 Drupal has released security advisories to address multiple vulnerabilities in the Drupal products.

]]> Security Alert (A23-03-09): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=990 https://www.govcert.gov.hk/en/alerts_detail.php?id=990 Wed, 15 Mar 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-09 and MFSA2023-10) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A23-03-08): Multiple Vulnerabilities in Microsoft Products (March 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=989 https://www.govcert.gov.hk/en/alerts_detail.php?id=989 Wed, 15 Mar 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A23-03-07): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=988 https://www.govcert.gov.hk/en/alerts_detail.php?id=988 Tue, 14 Mar 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-03-06): Multiple Vulnerabilities in Cisco IOS XR Software https://www.govcert.gov.hk/en/alerts_detail.php?id=987 https://www.govcert.gov.hk/en/alerts_detail.php?id=987 Thu, 9 Mar 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-03-05): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=986 https://www.govcert.gov.hk/en/alerts_detail.php?id=986 Wed, 8 Mar 2023 12:00:00 +0800 Google has released Android Security Bulletin March 2023 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A23-03-04): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=985 https://www.govcert.gov.hk/en/alerts_detail.php?id=985 Wed, 8 Mar 2023 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> Security Alert (A23-03-03): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=984 https://www.govcert.gov.hk/en/alerts_detail.php?id=984 Wed, 8 Mar 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-03-02): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=983 https://www.govcert.gov.hk/en/alerts_detail.php?id=983 Wed, 8 Mar 2023 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> Security Alert (A23-03-01): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=982 https://www.govcert.gov.hk/en/alerts_detail.php?id=982 Mon, 6 Mar 2023 12:00:00 +0800 SonicWall has released security advisories to address multiple vulnerabilities in SonicOS which is the operating system for SonicWall firewalls.

]]> High Threat Security Alert (A23-02-23): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=981 https://www.govcert.gov.hk/en/alerts_detail.php?id=981 Thu, 2 Mar 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-02-22): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=980 https://www.govcert.gov.hk/en/alerts_detail.php?id=980 Mon, 27 Feb 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-02-21): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=978 https://www.govcert.gov.hk/en/alerts_detail.php?id=978 Thu, 23 Feb 2023 12:00:00 +0800 The Apache Software Foundation released a security update to address a vulnerability in the Apache Tomcat.

]]> Security Alert (A23-02-20): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=977 https://www.govcert.gov.hk/en/alerts_detail.php?id=977 Thu, 23 Feb 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-02-19): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=976 https://www.govcert.gov.hk/en/alerts_detail.php?id=976 Thu, 23 Feb 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-02-18): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=975 https://www.govcert.gov.hk/en/alerts_detail.php?id=975 Wed, 22 Feb 2023 12:00:00 +0800 VMware has published security advisories to address multiple vulnerabilities in VMware products.

]]> High Threat Security Alert (A23-02-17): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=974 https://www.govcert.gov.hk/en/alerts_detail.php?id=974 Fri, 17 Feb 2023 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> Security Alert (A23-02-16): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=973 https://www.govcert.gov.hk/en/alerts_detail.php?id=973 Thu, 16 Feb 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-02-15): Multiple Vulnerabilities in Citrix Products https://www.govcert.gov.hk/en/alerts_detail.php?id=972 https://www.govcert.gov.hk/en/alerts_detail.php?id=972 Wed, 15 Feb 2023 12:00:00 +0800 Citrix released security advisories to address multiple vulnerabilities in Citrix products.

]]> Security Alert (A23-02-14): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=971 https://www.govcert.gov.hk/en/alerts_detail.php?id=971 Wed, 15 Feb 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-05 and MFSA2023-06) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A23-02-13): Multiple Vulnerabilities in Microsoft Products (February 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=970 https://www.govcert.gov.hk/en/alerts_detail.php?id=970 Wed, 15 Feb 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A23-02-12): Vulnerability in SonicWall Email Security https://www.govcert.gov.hk/en/alerts_detail.php?id=969 https://www.govcert.gov.hk/en/alerts_detail.php?id=969 Tue, 14 Feb 2023 12:00:00 +0800 SonicWall has released a security advisory to address an information disclosure vulnerability in SonicWall Email Security.

]]> High Threat Security Alert (A23-02-11): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=968 https://www.govcert.gov.hk/en/alerts_detail.php?id=968 Tue, 14 Feb 2023 12:00:00 +0800 Apple has released iOS 16.3.1 and iPadOS 16.3.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A23-02-10): Multiple Vulnerabilities in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=967 https://www.govcert.gov.hk/en/alerts_detail.php?id=967 Fri, 10 Feb 2023 12:00:00 +0800 OpenSSL has released 1.1.1t and 3.0.8 to fix the vulnerabilities in various versions of OpenSSL.

]]> Security Alert (A23-02-09): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=966 https://www.govcert.gov.hk/en/alerts_detail.php?id=966 Fri, 10 Feb 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-02-08): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=965 https://www.govcert.gov.hk/en/alerts_detail.php?id=965 Wed, 8 Feb 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A23-02-07): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=964 https://www.govcert.gov.hk/en/alerts_detail.php?id=964 Tue, 7 Feb 2023 12:00:00 +0800 Google has released Android Security Bulletin February 2023 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A23-02-06): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=963 https://www.govcert.gov.hk/en/alerts_detail.php?id=963 Mon, 6 Feb 2023 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 devices.

]]> Security Alert (A23-02-05): Vulnerability in VMware Workstation https://www.govcert.gov.hk/en/alerts_detail.php?id=962 https://www.govcert.gov.hk/en/alerts_detail.php?id=962 Mon, 6 Feb 2023 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware Workstation.

]]> Security Alert (A23-02-04): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=961 https://www.govcert.gov.hk/en/alerts_detail.php?id=961 Mon, 6 Feb 2023 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A23-02-03): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=960 https://www.govcert.gov.hk/en/alerts_detail.php?id=960 Thu, 2 Feb 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-02-02): Vulnerability in QNAP Products https://www.govcert.gov.hk/en/alerts_detail.php?id=959 https://www.govcert.gov.hk/en/alerts_detail.php?id=959 Wed, 1 Feb 2023 12:00:00 +0800 QNAP has published a security advisory to address a vulnerability in QNAP QTS and QNAP QuTS hero.

]]> Security Alert (A23-02-01): Vulnerability in VMware vRealize Operations https://www.govcert.gov.hk/en/alerts_detail.php?id=958 https://www.govcert.gov.hk/en/alerts_detail.php?id=958 Wed, 1 Feb 2023 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware vRealize Operations.

]]> Security Alert (A23-01-17): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=957 https://www.govcert.gov.hk/en/alerts_detail.php?id=957 Mon, 30 Jan 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-01-16): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=956 https://www.govcert.gov.hk/en/alerts_detail.php?id=956 Thu, 26 Jan 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-01-15): Multiple Vulnerabilities in VMware vRealize Log Insight https://www.govcert.gov.hk/en/alerts_detail.php?id=955 https://www.govcert.gov.hk/en/alerts_detail.php?id=955 Thu, 26 Jan 2023 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> High Threat Security Alert (A23-01-14): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=954 https://www.govcert.gov.hk/en/alerts_detail.php?id=954 Thu, 26 Jan 2023 12:00:00 +0800 Apple has released iOS 12.5.7, iOS 15.7.3, iOS 16.3, iPadOS 15.7.3 and iPadOS 16.3 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A23-01-13): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=953 https://www.govcert.gov.hk/en/alerts_detail.php?id=953 Fri, 20 Jan 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A23-01-12): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=952 https://www.govcert.gov.hk/en/alerts_detail.php?id=952 Thu, 19 Jan 2023 12:00:00 +0800 Drupal has released a security advisory to address a vulnerability in the Drupal products.

]]> Security Alert (A23-01-11): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=951 https://www.govcert.gov.hk/en/alerts_detail.php?id=951 Thu, 19 Jan 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-01-10): Multiple Vulnerabilities in Oracle Java and Oracle Products (January 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=950 https://www.govcert.gov.hk/en/alerts_detail.php?id=950 Wed, 18 Jan 2023 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A23-01-09): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=949 https://www.govcert.gov.hk/en/alerts_detail.php?id=949 Wed, 18 Jan 2023 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> Security Alert (A23-01-08): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=948 https://www.govcert.gov.hk/en/alerts_detail.php?id=948 Wed, 18 Jan 2023 12:00:00 +0800 Mozilla has published the advisories (MFSA2023-01 and MFSA2023-02) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A23-01-07): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=947 https://www.govcert.gov.hk/en/alerts_detail.php?id=947 Fri, 13 Jan 2023 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A23-01-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=946 https://www.govcert.gov.hk/en/alerts_detail.php?id=946 Thu, 12 Jan 2023 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A23-01-05): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=945 https://www.govcert.gov.hk/en/alerts_detail.php?id=945 Wed, 11 Jan 2023 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A23-01-04): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=944 https://www.govcert.gov.hk/en/alerts_detail.php?id=944 Wed, 11 Jan 2023 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A23-01-03): Multiple Vulnerabilities in Microsoft Products (January 2023) https://www.govcert.gov.hk/en/alerts_detail.php?id=943 https://www.govcert.gov.hk/en/alerts_detail.php?id=943 Wed, 11 Jan 2023 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A23-01-02): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=942 https://www.govcert.gov.hk/en/alerts_detail.php?id=942 Wed, 4 Jan 2023 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> Security Alert (A23-01-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=941 https://www.govcert.gov.hk/en/alerts_detail.php?id=941 Wed, 4 Jan 2023 12:00:00 +0800 Google has released Android Security Bulletin January 2023 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A22-12-15): Vulnerability in Linux Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=940 https://www.govcert.gov.hk/en/alerts_detail.php?id=940 Wed, 28 Dec 2022 12:00:00 +0800 A remote code execution vulnerability is found in the Linux kernel 5.15 through 5.19 with KSMBD enabled.

]]> Security Alert (A22-12-14): Multiple Vulnerabilities in VMware vRealize Operations https://www.govcert.gov.hk/en/alerts_detail.php?id=939 https://www.govcert.gov.hk/en/alerts_detail.php?id=939 Mon, 19 Dec 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware vRealize Operations.

]]> Security Alert (A22-12-13): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=938 https://www.govcert.gov.hk/en/alerts_detail.php?id=938 Mon, 19 Dec 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A22-12-12): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=937 https://www.govcert.gov.hk/en/alerts_detail.php?id=937 Wed, 14 Dec 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-51 and MFSA2022-52) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-12-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=936 https://www.govcert.gov.hk/en/alerts_detail.php?id=936 Wed, 14 Dec 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-12-10): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=935 https://www.govcert.gov.hk/en/alerts_detail.php?id=935 Wed, 14 Dec 2022 12:00:00 +0800 VMware has published security advisories to address multiple vulnerabilities in VMware products.

]]> High Threat Security Alert (A22-12-09): Vulnerability in Citrix Products https://www.govcert.gov.hk/en/alerts_detail.php?id=934 https://www.govcert.gov.hk/en/alerts_detail.php?id=934 Wed, 14 Dec 2022 12:00:00 +0800 Citrix released a security advisory to address a remote code execution vulnerability in Citrix Application Delivery Controller and Citrix Gateway.

]]> High Threat Security Alert (A22-12-08): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=933 https://www.govcert.gov.hk/en/alerts_detail.php?id=933 Wed, 14 Dec 2022 12:00:00 +0800 Apple has released iOS 15.7.2, iOS 16.2, iPadOS 15.7.2 and iPadOS 16.2 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A22-12-07): Multiple Vulnerabilities in Microsoft Products(December 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=932 https://www.govcert.gov.hk/en/alerts_detail.php?id=932 Wed, 14 Dec 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A22-12-06): Vulnerability in Fortinet FortiOS https://www.govcert.gov.hk/en/alerts_detail.php?id=931 https://www.govcert.gov.hk/en/alerts_detail.php?id=931 Tue, 13 Dec 2022 12:00:00 +0800 Fortinet released security advisory to address a remote code execution vulnerability in Fortinet FortiOS.

]]> Security Alert (A22-12-05): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=930 https://www.govcert.gov.hk/en/alerts_detail.php?id=930 Mon, 12 Dec 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A22-12-04): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=929 https://www.govcert.gov.hk/en/alerts_detail.php?id=929 Wed, 7 Dec 2022 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> Security Alert (A22-12-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=928 https://www.govcert.gov.hk/en/alerts_detail.php?id=928 Tue, 6 Dec 2022 12:00:00 +0800 Google has released Android Security Bulletin December 2022 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A22-12-02): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=927 https://www.govcert.gov.hk/en/alerts_detail.php?id=927 Tue, 6 Dec 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A22-12-01): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=926 https://www.govcert.gov.hk/en/alerts_detail.php?id=926 Mon, 5 Dec 2022 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A22-11-19): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=925 https://www.govcert.gov.hk/en/alerts_detail.php?id=925 Thu, 1 Dec 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-11-18): Vulnerability in VMware Tools for Windows https://www.govcert.gov.hk/en/alerts_detail.php?id=924 https://www.govcert.gov.hk/en/alerts_detail.php?id=924 Wed, 30 Nov 2022 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware Tools for Windows.

]]> High Threat Security Alert (A22-11-17): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=923 https://www.govcert.gov.hk/en/alerts_detail.php?id=923 Tue, 29 Nov 2022 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> High Threat Security Alert (A22-11-16): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=922 https://www.govcert.gov.hk/en/alerts_detail.php?id=922 Fri, 25 Nov 2022 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A22-11-15): Multiple Vulnerabilities in F5 Products https://www.govcert.gov.hk/en/alerts_detail.php?id=921 https://www.govcert.gov.hk/en/alerts_detail.php?id=921 Thu, 17 Nov 2022 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in BIG-IP and BIG-IQ devices.

]]> Security Alert (A22-11-14): Multiple Vulnerabilities in Cisco Identity Services Engine https://www.govcert.gov.hk/en/alerts_detail.php?id=920 https://www.govcert.gov.hk/en/alerts_detail.php?id=920 Thu, 17 Nov 2022 12:00:00 +0800 Cisco released a security advisory to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-11-13): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=919 https://www.govcert.gov.hk/en/alerts_detail.php?id=919 Wed, 16 Nov 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-47 and MFSA2022-48) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-11-12): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=918 https://www.govcert.gov.hk/en/alerts_detail.php?id=918 Fri, 11 Nov 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A22-11-11): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=917 https://www.govcert.gov.hk/en/alerts_detail.php?id=917 Thu, 10 Nov 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-11-10): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=916 https://www.govcert.gov.hk/en/alerts_detail.php?id=916 Thu, 10 Nov 2022 12:00:00 +0800 Apple has released iOS 16.1.1 and iPadOS 16.1.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A22-11-09): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=915 https://www.govcert.gov.hk/en/alerts_detail.php?id=915 Wed, 09 Nov 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A22-11-08): Multiple Vulnerabilities in VMware Workspace ONE Assist https://www.govcert.gov.hk/en/alerts_detail.php?id=914 https://www.govcert.gov.hk/en/alerts_detail.php?id=914 Wed, 09 Nov 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware Workspace ONE Assist.

]]> High Threat Security Alert (A22-11-07): Multiple Vulnerabilities in Microsoft Products (November 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=913 https://www.govcert.gov.hk/en/alerts_detail.php?id=913 Wed, 09 Nov 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A22-11-06): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=912 https://www.govcert.gov.hk/en/alerts_detail.php?id=912 Tue, 08 Nov 2022 12:00:00 +0800 Google has released Android Security Bulletin November 2022 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A22-11-05): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=911 https://www.govcert.gov.hk/en/alerts_detail.php?id=911 Thu, 03 Nov 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-11-04): Multiple Vulnerabilities in Synology DiskStation Manager https://www.govcert.gov.hk/en/alerts_detail.php?id=910 https://www.govcert.gov.hk/en/alerts_detail.php?id=910 Wed, 02 Nov 2022 12:00:00 +0800 Synology has published a security advisory to address multiple vulnerabilities in various versions of DiskStation Manager (DSM).

]]> Security Alert (A22-11-03): Multiple Vulnerabilities in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=909 https://www.govcert.gov.hk/en/alerts_detail.php?id=909 Wed, 02 Nov 2022 12:00:00 +0800 OpenSSL has released 3.0.7 to fix the vulnerabilities in various versions of OpenSSL.

]]> Security Alert (A22-11-02): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=908 https://www.govcert.gov.hk/en/alerts_detail.php?id=908 Wed, 02 Nov 2022 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products.

]]> High Threat Security Alert (A22-11-01): Vulnerability in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=907 https://www.govcert.gov.hk/en/alerts_detail.php?id=907 Tue, 01 Nov 2022 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge.

]]> Security Alert (A22-10-23): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=906 https://www.govcert.gov.hk/en/alerts_detail.php?id=906 Fri, 28 Oct 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> High Threat Security Alert (A22-10-22): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=905 https://www.govcert.gov.hk/en/alerts_detail.php?id=905 Fri, 28 Oct 2022 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A22-10-21): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=904 https://www.govcert.gov.hk/en/alerts_detail.php?id=904 Wed, 26 Oct 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A22-10-20): Multiple Vulnerabilities in VMware Cloud Foundation https://www.govcert.gov.hk/en/alerts_detail.php?id=903 https://www.govcert.gov.hk/en/alerts_detail.php?id=903 Wed, 26 Oct 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware Cloud Foundation.

]]> High Threat Security Alert (A22-10-19): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=902 https://www.govcert.gov.hk/en/alerts_detail.php?id=902 Tue, 25 Oct 2022 12:00:00 +0800 Apple has released iOS 15.7.1, iOS 16.1, iPadOS 15.7.1 and iPadOS 16 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A22-10-18): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=901 https://www.govcert.gov.hk/en/alerts_detail.php?id=901 Thu, 20 Oct 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-10-17): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=900 https://www.govcert.gov.hk/en/alerts_detail.php?id=900 Wed, 19 Oct 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-44 and MFSA2022-45) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-10-16): Multiple Vulnerabilities in Oracle Java and Oracle Products (October 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=899 https://www.govcert.gov.hk/en/alerts_detail.php?id=899 Wed, 19 Oct 2022 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A22-10-15): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=898 https://www.govcert.gov.hk/en/alerts_detail.php?id=898 Mon, 17 Oct 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A22-10-14): Multiple Vulnerabilities in Ivanti Connect Secure https://www.govcert.gov.hk/en/alerts_detail.php?id=897 https://www.govcert.gov.hk/en/alerts_detail.php?id=897 Fri, 14 Oct 2022 12:00:00 +0800 Ivanti has published a security advisory to address multiple vulnerabilities in Ivanti Connect Secure.

]]> Security Alert (A22-10-13): Vulnerability in SonicWall Global Management System https://www.govcert.gov.hk/en/alerts_detail.php?id=896 https://www.govcert.gov.hk/en/alerts_detail.php?id=896 Fri, 14 Oct 2022 12:00:00 +0800 SonicWall has released a security advisory to address a path traversal vulnerability in SonicWall GMS.

]]> Security Alert (A22-10-12): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=895 https://www.govcert.gov.hk/en/alerts_detail.php?id=895 Wed, 12 Oct 2022 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A22-10-11): Vulnerability in VMware Aria Operations https://www.govcert.gov.hk/en/alerts_detail.php?id=894 https://www.govcert.gov.hk/en/alerts_detail.php?id=894 Wed, 12 Oct 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerability in VMware Aria Operations.

]]> Security Alert (A22-10-10): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=893 https://www.govcert.gov.hk/en/alerts_detail.php?id=893 Wed, 12 Oct 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A22-10-09): Multiple Vulnerabilities in Microsoft Products (October 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=892 https://www.govcert.gov.hk/en/alerts_detail.php?id=892 Wed, 12 Oct 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A22-10-08): Multiple Vulnerabilities in Fortinet Products https://www.govcert.gov.hk/en/alerts_detail.php?id=891 https://www.govcert.gov.hk/en/alerts_detail.php?id=891 Tue, 11 Oct 2022 12:00:00 +0800 Fortinet released security advisories to address multiple vulnerabilities in Fortinet products in addition to the remote authentication bypass vulnerability (CVE-2022-40684) mentioned in security alert (A22-10-05).

]]> Security Alert (A22-10-07): Vulnerability in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=890 https://www.govcert.gov.hk/en/alerts_detail.php?id=890 Tue, 11 Oct 2022 12:00:00 +0800 Apple has released iOS 16.0.3 to fix the vulnerability in various Apple devices.

]]> Security Alert (A22-10-06): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=889 https://www.govcert.gov.hk/en/alerts_detail.php?id=889 Mon, 10 Oct 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> High Threat Security Alert (A22-10-05): Vulnerability in FortiOS and FortiProxy https://www.govcert.gov.hk/en/alerts_detail.php?id=888 https://www.govcert.gov.hk/en/alerts_detail.php?id=888 Mon, 10 Oct 2022 12:00:00 +0800 Fortinet released security advisories to address a vulnerability in FortiOS and FortiProxy software.

]]> Security Alert (A22-10-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=887 https://www.govcert.gov.hk/en/alerts_detail.php?id=887 Thu, 06 Oct 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-10-03): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=886 https://www.govcert.gov.hk/en/alerts_detail.php?id=886 Wed, 05 Oct 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A22-10-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=885 https://www.govcert.gov.hk/en/alerts_detail.php?id=885 Wed, 05 Oct 2022 12:00:00 +0800 Google has released Android Security Bulletin October 2022 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A22-10-01): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=884 https://www.govcert.gov.hk/en/alerts_detail.php?id=884 Wed, 05 Oct 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A22-09-21): Multiple Vulnerabilities in Microsoft Exchange Server https://www.govcert.gov.hk/en/alerts_detail.php?id=883 https://www.govcert.gov.hk/en/alerts_detail.php?id=883 Fri, 30 Sep 2022 12:00:00 +0800 Two zero-day vulnerabilities in Microsoft Exchange Server were observed in multiple attack campaigns.

]]> Security Alert (A22-09-20): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=882 https://www.govcert.gov.hk/en/alerts_detail.php?id=882 Thu, 29 Sep 2022 12:00:00 +0800 Drupal has released a security advisory to address a vulnerability in the Drupal products.

]]> Security Alert (A22-09-19): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=881 https://www.govcert.gov.hk/en/alerts_detail.php?id=881 Thu, 29 Sep 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-09-18): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=880 https://www.govcert.gov.hk/en/alerts_detail.php?id=880 Wed, 28 Sep 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-09-17): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=879 https://www.govcert.gov.hk/en/alerts_detail.php?id=879 Wed, 28 Sep 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A22-09-16): Vulnerability in Sophos Firewall https://www.govcert.gov.hk/en/alerts_detail.php?id=878 https://www.govcert.gov.hk/en/alerts_detail.php?id=878 Mon, 26 Sep 2022 12:00:00 +0800 Sophos has published a security advisory to address a code injection vulnerability in the administration interface and user portal of the firewall.

]]> Security Alert (A22-09-15): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=877 https://www.govcert.gov.hk/en/alerts_detail.php?id=877 Thu, 22 Sep 2022 12:00:00 +0800 ISC has released a security update to fix the vulnerabilities in BIND.

]]> Security Alert (A22-09-14): Vulnerability in Microsoft Endpoint Configuration Manager https://www.govcert.gov.hk/en/alerts_detail.php?id=876 https://www.govcert.gov.hk/en/alerts_detail.php?id=876 Thu, 22 Sep 2022 12:00:00 +0800 Microsoft has released an out-of-band security update to address the vulnerability in Microsoft Endpoint Configuration Manager.

]]> Security Alert (A22-09-13): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=875 https://www.govcert.gov.hk/en/alerts_detail.php?id=875 Wed, 21 Sep 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-40 and MFSA2022-41) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-09-12): Multiple Vulnerabilities in Microsoft Edge https://www.govcert.gov.hk/en/alerts_detail.php?id=874 https://www.govcert.gov.hk/en/alerts_detail.php?id=874 Fri, 16 Sep 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge.

]]> Security Alert (A22-09-11): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=873 https://www.govcert.gov.hk/en/alerts_detail.php?id=873 Thu, 15 Sep 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-09-10): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=872 https://www.govcert.gov.hk/en/alerts_detail.php?id=872 Thu, 15 Sep 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A22-09-09): Multiple Vulnerabilities in Trend Micro Apex One https://www.govcert.gov.hk/en/alerts_detail.php?id=871 https://www.govcert.gov.hk/en/alerts_detail.php?id=871 Wed, 14 Sep 2022 12:00:00 +0800 Trend Micro has published a security advisory to address multiple vulnerabilities in Apex One.

]]> High Threat Security Alert (A22-09-08): Multiple Vulnerabilities in Microsoft Products (September 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=870 https://www.govcert.gov.hk/en/alerts_detail.php?id=870 Wed, 14 Sep 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A22-09-07): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=869 https://www.govcert.gov.hk/en/alerts_detail.php?id=869 Tue, 13 Sep 2022 12:00:00 +0800 Apple has released iOS 15.7, iOS 16 and iPadOS 15.7 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A22-09-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=868 https://www.govcert.gov.hk/en/alerts_detail.php?id=868 Thu, 08 Sep 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-09-05): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=867 https://www.govcert.gov.hk/en/alerts_detail.php?id=867 Wed, 07 Sep 2022 12:00:00 +0800 Google has released Android Security Bulletin September 2022 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A22-09-04): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=866 https://www.govcert.gov.hk/en/alerts_detail.php?id=866 Mon, 05 Sep 2022 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A22-09-03): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=865 https://www.govcert.gov.hk/en/alerts_detail.php?id=865 Mon, 05 Sep 2022 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A22-09-02): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=864 https://www.govcert.gov.hk/en/alerts_detail.php?id=864 Fri, 02 Sep 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A22-09-01): Vulnerability in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=863 https://www.govcert.gov.hk/en/alerts_detail.php?id=863 Thu, 01 Sep 2022 12:00:00 +0800 Apple has released iOS 12.5.6 to fix the vulnerability in various Apple devices.

]]> Security Alert (A22-08-18): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=862 https://www.govcert.gov.hk/en/alerts_detail.php?id=862 Wed, 31 Aug 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-08-17): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=861 https://www.govcert.gov.hk/en/alerts_detail.php?id=861 Thu, 25 Aug 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-08-16): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=860 https://www.govcert.gov.hk/en/alerts_detail.php?id=860 Wed, 24 Aug 2022 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware products.

]]> Security Alert (A22-08-15): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=859 https://www.govcert.gov.hk/en/alerts_detail.php?id=859 Wed, 24 Aug 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-33, MFSA2022-34 and MFSA2022-35) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-08-14): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=858 https://www.govcert.gov.hk/en/alerts_detail.php?id=858 Mon, 22 Aug 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-08-13): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=857 https://www.govcert.gov.hk/en/alerts_detail.php?id=857 Thu, 18 Aug 2022 12:00:00 +0800 Cisco released a security advisory to address the vulnerability in Cisco devices and software.

]]> High Threat Security Alert (A22-08-12): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=856 https://www.govcert.gov.hk/en/alerts_detail.php?id=856 Thu, 18 Aug 2022 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A22-08-11): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=855 https://www.govcert.gov.hk/en/alerts_detail.php?id=855 Thu, 18 Aug 2022 12:00:00 +0800 Apple has released iOS 15.6.1 and iPadOS 15.6.1 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A22-08-10): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=854 https://www.govcert.gov.hk/en/alerts_detail.php?id=854 Wed, 17 Aug 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-08-09): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=853 https://www.govcert.gov.hk/en/alerts_detail.php?id=853 Thu, 11 Aug 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-08-08): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=852 https://www.govcert.gov.hk/en/alerts_detail.php?id=852 Wed, 10 Aug 2022 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A22-08-07): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=851 https://www.govcert.gov.hk/en/alerts_detail.php?id=851 Wed, 10 Aug 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> High Threat Security Alert (A22-08-06): Multiple Vulnerabilities in Microsoft Products (August 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=850 https://www.govcert.gov.hk/en/alerts_detail.php?id=850 Wed, 10 Aug 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A22-08-05): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=849 https://www.govcert.gov.hk/en/alerts_detail.php?id=849 Mon, 08 Aug 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A22-08-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=848 https://www.govcert.gov.hk/en/alerts_detail.php?id=848 Thu, 04 Aug 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-08-03): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=847 https://www.govcert.gov.hk/en/alerts_detail.php?id=847 Wed, 03 Aug 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A22-08-02): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=846 https://www.govcert.gov.hk/en/alerts_detail.php?id=846 Wed, 03 Aug 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A22-08-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=845 https://www.govcert.gov.hk/en/alerts_detail.php?id=845 Tue, 02 Aug 2022 12:00:00 +0800 Google has released Android Security Bulletin August 2022 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A22-07-18): Multiple Vulnerabilities in Samba https://www.govcert.gov.hk/en/alerts_detail.php?id=844 https://www.govcert.gov.hk/en/alerts_detail.php?id=844 Fri, 29 Jul 2022 12:00:00 +0800 Samba released security updates to address multiple vulnerabilities in Samba.

]]> Security Alert (A22-07-17): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=843 https://www.govcert.gov.hk/en/alerts_detail.php?id=843 Wed, 27 Jul 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-28, MFSA2022-29 and MFSA2022-30) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-07-16): Vulnerability in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=842 https://www.govcert.gov.hk/en/alerts_detail.php?id=842 Mon, 25 Jul 2022 12:00:00 +0800 SonicWall has released a security advisory to address an unauthenticated SQL injection vulnerability in SonicWall Analytics and GMS products.

]]> Security Alert (A22-07-15): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=841 https://www.govcert.gov.hk/en/alerts_detail.php?id=841 Mon, 25 Jul 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-07-14): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=840 https://www.govcert.gov.hk/en/alerts_detail.php?id=840 Thu, 21 Jul 2022 12:00:00 +0800 Drupal has released a security advisory to address multiple vulnerabilities in the Drupal products.

]]> Security Alert (A22-07-13): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=839 https://www.govcert.gov.hk/en/alerts_detail.php?id=839 Thu, 21 Jul 2022 12:00:00 +0800 Apple has released iOS 15.6 and iPadOS 15.6 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A22-07-12): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=838 https://www.govcert.gov.hk/en/alerts_detail.php?id=838 Thu, 21 Jul 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-07-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=837 https://www.govcert.gov.hk/en/alerts_detail.php?id=837 Wed, 20 Jul 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-07-10): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=836 https://www.govcert.gov.hk/en/alerts_detail.php?id=836 Wed, 20 Jul 2022 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A22-07-09): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=835 https://www.govcert.gov.hk/en/alerts_detail.php?id=835 Wed, 13 Jul 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A22-07-08): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=834 https://www.govcert.gov.hk/en/alerts_detail.php?id=834 Wed, 13 Jul 2022 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A22-07-07): Multiple Vulnerabilities in Microsoft Products (July 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=833 https://www.govcert.gov.hk/en/alerts_detail.php?id=833 Wed, 13 Jul 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A22-07-06): Multiple Vulnerabilities in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=832 https://www.govcert.gov.hk/en/alerts_detail.php?id=832 Thu, 07 Jul 2022 12:00:00 +0800 OpenSSL has released 1.1.1q and 3.0.5 to fix the vulnerabilities in various versions of OpenSSL.

]]> Security Alert (A22-07-05): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=831 https://www.govcert.gov.hk/en/alerts_detail.php?id=831 Thu, 07 Jul 2022 12:00:00 +0800 Google has released Android Security Bulletin July 2022 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A22-07-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=830 https://www.govcert.gov.hk/en/alerts_detail.php?id=830 Thu, 07 Jul 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A22-07-03): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=829 https://www.govcert.gov.hk/en/alerts_detail.php?id=829 Thu, 07 Jul 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A22-07-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=828 https://www.govcert.gov.hk/en/alerts_detail.php?id=828 Tue, 05 Jul 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-07-01): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=827 https://www.govcert.gov.hk/en/alerts_detail.php?id=827 Mon, 04 Jul 2022 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-06-13): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=826 https://www.govcert.gov.hk/en/alerts_detail.php?id=826 Wed, 29 Jun 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-24 and MFSA2022-25) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-06-12): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=825 https://www.govcert.gov.hk/en/alerts_detail.php?id=825 Fri, 24 Jun 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-06-11): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=824 https://www.govcert.gov.hk/en/alerts_detail.php?id=824 Thu, 23 Jun 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-06-10): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=823 https://www.govcert.gov.hk/en/alerts_detail.php?id=823 Wed, 22 Jun 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-06-09): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=822 https://www.govcert.gov.hk/en/alerts_detail.php?id=822 Thu, 16 Jun 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A22-06-08): Multiple Vulnerabilities in Microsoft Products (June 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=821 https://www.govcert.gov.hk/en/alerts_detail.php?id=821 Wed, 15 Jun 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A22-06-07): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=820 https://www.govcert.gov.hk/en/alerts_detail.php?id=820 Mon, 13 Jun 2022 12:00:00 +0800 Drupal has released a security advisory to address multiple vulnerabilities in the Drupal products.

]]> Security Alert (A22-06-06): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=819 https://www.govcert.gov.hk/en/alerts_detail.php?id=819 Fri, 10 Jun 2022 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-06-05): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=818 https://www.govcert.gov.hk/en/alerts_detail.php?id=818 Fri, 10 Jun 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-06-04): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=817 https://www.govcert.gov.hk/en/alerts_detail.php?id=817 Thu, 09 Jun 2022 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> Security Alert (A22-06-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=816 https://www.govcert.gov.hk/en/alerts_detail.php?id=816 Tue, 07 Jun 2022 12:00:00 +0800 Google has released Android Security Bulletin June 2022 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A22-06-02): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=815 https://www.govcert.gov.hk/en/alerts_detail.php?id=815 Wed, 01 Jun 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-20 and MFSA2022-21) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-06-01): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=814 https://www.govcert.gov.hk/en/alerts_detail.php?id=814 Wed, 01 Jun 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A22-05-17): Vulnerability in Microsoft Windows https://www.govcert.gov.hk/en/alerts_detail.php?id=813 https://www.govcert.gov.hk/en/alerts_detail.php?id=813 Tue, 31 May 2022 12:00:00 +0800 Microsoft has released an out-of-band security advisory to address the vulnerability in Microsoft Diagnostic Tool (MSDT) being called via the URL protocol from a calling application such as Word.

]]> Security Alert (A22-05-16): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=812 https://www.govcert.gov.hk/en/alerts_detail.php?id=812 Thu, 26 May 2022 12:00:00 +0800 Drupal has released a security advisory to address a vulnerability in the Drupal products.

]]> Security Alert (A22-05-15): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=811 https://www.govcert.gov.hk/en/alerts_detail.php?id=811 Wed, 25 May 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-05-14): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=810 https://www.govcert.gov.hk/en/alerts_detail.php?id=810 Mon, 23 May 2022 12:00:00 +0800 Mozilla has published the advisory (MFSA2022-19) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A22-05-13): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=809 https://www.govcert.gov.hk/en/alerts_detail.php?id=809 Mon, 23 May 2022 12:00:00 +0800 Cisco released security advisory to address the vulnerability in Cisco devices and software.

]]> Security Alert (A22-05-12): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=808 https://www.govcert.gov.hk/en/alerts_detail.php?id=808 Thu, 19 May 2022 12:00:00 +0800 ISC has released a security update to fix the vulnerability in BIND.

]]> Security Alert (A22-05-11): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=807 https://www.govcert.gov.hk/en/alerts_detail.php?id=807 Thu, 19 May 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A22-05-10): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=806 https://www.govcert.gov.hk/en/alerts_detail.php?id=806 Thu, 19 May 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A22-05-09): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=805 https://www.govcert.gov.hk/en/alerts_detail.php?id=805 Tue, 17 May 2022 12:00:00 +0800 Apache Software Foundation has released a security advisory to address a vulnerability in the Apache Tomcat.

]]> Security Alert (A22-05-08): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=804 https://www.govcert.gov.hk/en/alerts_detail.php?id=804 Tue, 17 May 2022 12:00:00 +0800 Apple has released iOS 15.5 and iPadOS 15.5 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A22-05-07): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=803 https://www.govcert.gov.hk/en/alerts_detail.php?id=803 Mon, 16 May 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-05-06): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=802 https://www.govcert.gov.hk/en/alerts_detail.php?id=802 Wed, 11 May 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A22-05-05): Multiple Vulnerabilities in Microsoft Products (May 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=801 https://www.govcert.gov.hk/en/alerts_detail.php?id=801 Wed, 11 May 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A22-05-04): Vulnerability in F5 BIG-IP https://www.govcert.gov.hk/en/alerts_detail.php?id=800 https://www.govcert.gov.hk/en/alerts_detail.php?id=800 Thu, 05 May 2022 12:00:00 +0800 F5 has published a security advisory to address a vulnerability in F5 devices.

]]> Security Alert (A22-05-03): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=799 https://www.govcert.gov.hk/en/alerts_detail.php?id=799 Thu, 05 May 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-05-02): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=798 https://www.govcert.gov.hk/en/alerts_detail.php?id=798 Wed, 04 May 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-16 and MFSA2022-17) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-05-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=797 https://www.govcert.gov.hk/en/alerts_detail.php?id=797 Tue, 03 May 2022 12:00:00 +0800 Google has released Android Security Bulletin May 2022 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A22-04-25): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=796 https://www.govcert.gov.hk/en/alerts_detail.php?id=796 Fri, 29 Apr 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-04-24): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=795 https://www.govcert.gov.hk/en/alerts_detail.php?id=795 Thu, 28 Apr 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-04-23): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=794 https://www.govcert.gov.hk/en/alerts_detail.php?id=794 Wed, 27 Apr 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-04-22): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=793 https://www.govcert.gov.hk/en/alerts_detail.php?id=793 Fri, 22 Apr 2022 12:00:00 +0800 Drupal has released security advisories to address multiple vulnerabilities in the Drupal products.

]]> Security Alert (A22-04-21): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=792 https://www.govcert.gov.hk/en/alerts_detail.php?id=792 Thu, 21 Apr 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A22-04-20): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=791 https://www.govcert.gov.hk/en/alerts_detail.php?id=791 Wed, 20 Apr 2022 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A22-04-19): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=790 https://www.govcert.gov.hk/en/alerts_detail.php?id=790 Tue, 19 Apr 2022 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware products.

]]> High Threat Security Alert (A22-04-18): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=789 https://www.govcert.gov.hk/en/alerts_detail.php?id=789 Tue, 19 Apr 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A22-04-17): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=788 https://www.govcert.gov.hk/en/alerts_detail.php?id=788 Tue, 19 Apr 2022 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A22-04-16): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=787 https://www.govcert.gov.hk/en/alerts_detail.php?id=787 Thu, 14 Apr 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-04-15): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=786 https://www.govcert.gov.hk/en/alerts_detail.php?id=786 Wed, 13 Apr 2022 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A22-04-14): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=785 https://www.govcert.gov.hk/en/alerts_detail.php?id=785 Wed, 13 Apr 2022 12:00:00 +0800 Apache has released a security update to address a vulnerability in Apache Struts.

]]> High Threat Security Alert (A22-04-13): Multiple Vulnerabilities in Microsoft Products (April 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=784 https://www.govcert.gov.hk/en/alerts_detail.php?id=784 Wed, 13 Apr 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A22-04-12): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=783 https://www.govcert.gov.hk/en/alerts_detail.php?id=783 Tue, 12 Apr 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-04-11): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=777 https://www.govcert.gov.hk/en/alerts_detail.php?id=777 Fri, 08 Apr 2022 12:00:00 +0800 Microsoft released a security update to address the vulnerability in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-04-10): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=776 https://www.govcert.gov.hk/en/alerts_detail.php?id=776 Thu, 07 Apr 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A22-04-09): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=775 https://www.govcert.gov.hk/en/alerts_detail.php?id=775 Thu, 07 Apr 2022 12:00:00 +0800 VMware has published security advisories to address multiple vulnerabilities in VMware products.

]]> Security Alert (A22-04-08): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=774 https://www.govcert.gov.hk/en/alerts_detail.php?id=774 Wed, 06 Apr 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-13 and MFSA2022-14) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-04-07): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=773 https://www.govcert.gov.hk/en/alerts_detail.php?id=773 Wed, 06 Apr 2022 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A22-04-06): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=772 https://www.govcert.gov.hk/en/alerts_detail.php?id=772 Wed, 06 Apr 2022 12:00:00 +0800 Google has released Android Security Bulletin April 2022 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A22-04-05): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=771 https://www.govcert.gov.hk/en/alerts_detail.php?id=771 Mon, 04 Apr 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A22-04-04): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=770 https://www.govcert.gov.hk/en/alerts_detail.php?id=770 Mon, 04 Apr 2022 12:00:00 +0800 VMware has published a security advisory to address the vulnerability in VMware products.

]]> Security Alert (A22-04-03): Vulnerability in Pulse Secure Products https://www.govcert.gov.hk/en/alerts_detail.php?id=769 https://www.govcert.gov.hk/en/alerts_detail.php?id=769 Fri, 01 Apr 2022 12:00:00 +0800 Pulse Secure has published a security advisory to address a vulnerability in Pulse Secure products.

]]> High Threat Security Alert (A22-04-02): Vulnerability in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=768 https://www.govcert.gov.hk/en/alerts_detail.php?id=768 Fri, 01 Apr 2022 12:00:00 +0800 Apple has released iOS 15.4.1 and iPadOS 15.4.1 to fix the vulnerability in various Apple devices.

]]> High Threat Security Alert (A22-04-01): Multiple Vulnerabilities in Spring Framework https://www.govcert.gov.hk/en/alerts_detail.php?id=767 https://www.govcert.gov.hk/en/alerts_detail.php?id=767 Fri, 01 Apr 2022 12:00:00 +0800 Spring has released a security advisory to address multiple remote code execution vulnerabilities in Spring Framework.

]]> Security Alert (A22-03-21): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=766 https://www.govcert.gov.hk/en/alerts_detail.php?id=766 Wed, 30 Mar 2022 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware products.

]]> Security Alert (A22-03-20): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=765 https://www.govcert.gov.hk/en/alerts_detail.php?id=765 Wed, 30 Mar 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A22-03-19): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=764 https://www.govcert.gov.hk/en/alerts_detail.php?id=764 Mon, 28 Mar 2022 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A22-03-18): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=763 https://www.govcert.gov.hk/en/alerts_detail.php?id=763 Mon, 28 Mar 2022 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> Security Alert (A22-03-17): Vulnerability in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=762 https://www.govcert.gov.hk/en/alerts_detail.php?id=762 Fri, 25 Mar 2022 12:00:00 +0800 SonicWall has released a security advisory to address a buffer overflow vulnerability in SonicOS which is the operating system for SonicWall firewalls.

]]> Security Alert (A22-03-16): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=761 https://www.govcert.gov.hk/en/alerts_detail.php?id=761 Tue, 22 Mar 2022 12:00:00 +0800 Drupal has released a security advisory to address a vulnerability in the Guzzle library.

]]> Security Alert (A22-03-15): Vulnerability in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=760 https://www.govcert.gov.hk/en/alerts_detail.php?id=760 Fri, 18 Mar 2022 12:00:00 +0800 OpenSSL has released 1.1.1n and 3.0.2 to fix the vulnerability in various versions of OpenSSL.

]]> Security Alert (A22-03-14): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=759 https://www.govcert.gov.hk/en/alerts_detail.php?id=759 Fri, 18 Mar 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-03-13): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=758 https://www.govcert.gov.hk/en/alerts_detail.php?id=758 Thu, 17 Mar 2022 12:00:00 +0800 ISC has released a security update to fix the vulnerabilities in BIND.

]]> Security Alert (A22-03-12): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=757 https://www.govcert.gov.hk/en/alerts_detail.php?id=757 Thu, 17 Mar 2022 12:00:00 +0800 Drupal has released a security advisory to address multiple vulnerabilities in the CKEditor library for WYSIWYG editing.

]]> Security Alert (A22-03-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=756 https://www.govcert.gov.hk/en/alerts_detail.php?id=756 Wed, 16 Mar 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-03-10): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=755 https://www.govcert.gov.hk/en/alerts_detail.php?id=755 Tue, 15 Mar 2022 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> Security Alert (A22-03-09): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=754 https://www.govcert.gov.hk/en/alerts_detail.php?id=754 Tue, 15 Mar 2022 12:00:00 +0800 Apple has released iOS 15.4 and iPadOS 15.4 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A22-03-08): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=753 https://www.govcert.gov.hk/en/alerts_detail.php?id=753 Wed, 09 Mar 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-10 and MFSA2022-11) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A22-03-07): Multiple Vulnerabilities in Microsoft Products (March 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=752 https://www.govcert.gov.hk/en/alerts_detail.php?id=752 Wed, 09 Mar 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A22-03-06): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=751 https://www.govcert.gov.hk/en/alerts_detail.php?id=751 Tue, 08 Mar 2022 12:00:00 +0800 Google has released Android Security Bulletin March 2022 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A22-03-05): Vulnerability in Linux Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=750 https://www.govcert.gov.hk/en/alerts_detail.php?id=750 Tue, 08 Mar 2022 12:00:00 +0800 A local privilege escalation vulnerability is found in the Linux kernel 5.8 or later.

]]> High Threat Security Alert (A22-03-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=749 https://www.govcert.gov.hk/en/alerts_detail.php?id=749 Mon, 07 Mar 2022 12:00:00 +0800 Mozilla has published the advisory (MFSA2022-09) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A22-03-03): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=748 https://www.govcert.gov.hk/en/alerts_detail.php?id=748 Fri, 04 Mar 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-03-02): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=747 https://www.govcert.gov.hk/en/alerts_detail.php?id=747 Thu, 03 Mar 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-03-01): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=746 https://www.govcert.gov.hk/en/alerts_detail.php?id=746 Wed, 02 Mar 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-02-11): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=745 https://www.govcert.gov.hk/en/alerts_detail.php?id=745 Thu, 24 Feb 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-02-10): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=744 https://www.govcert.gov.hk/en/alerts_detail.php?id=744 Thu, 17 Feb 2022 12:00:00 +0800 Drupal has released security advisories to address multiple vulnerabilities in the Drupal products.

]]> Security Alert (A22-02-09): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=743 https://www.govcert.gov.hk/en/alerts_detail.php?id=743 Thu, 17 Feb 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A22-02-08): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=742 https://www.govcert.gov.hk/en/alerts_detail.php?id=742 Thu, 17 Feb 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-02-07): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=741 https://www.govcert.gov.hk/en/alerts_detail.php?id=741 Wed, 16 Feb 2022 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> High Threat Security Alert (A22-02-06): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=740 https://www.govcert.gov.hk/en/alerts_detail.php?id=740 Tue, 15 Feb 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-02-05): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=739 https://www.govcert.gov.hk/en/alerts_detail.php?id=739 Fri, 11 Feb 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A22-02-04): Vulnerability in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=738 https://www.govcert.gov.hk/en/alerts_detail.php?id=738 Fri, 11 Feb 2022 12:00:00 +0800 Apple has released iOS 15.3.1 and iPadOS 15.3.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A22-02-03): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=737 https://www.govcert.gov.hk/en/alerts_detail.php?id=737 Wed, 09 Feb 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-04 and MFSA2022-05) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A22-02-02): Multiple Vulnerabilities in Microsoft Products (February 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=736 https://www.govcert.gov.hk/en/alerts_detail.php?id=736 Wed, 09 Feb 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A22-02-01): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=735 https://www.govcert.gov.hk/en/alerts_detail.php?id=735 Tue, 08 Feb 2022 12:00:00 +0800 Google has released Android Security Bulletin February 2022 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A22-01-26): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=734 https://www.govcert.gov.hk/en/alerts_detail.php?id=734 Fri, 04 Feb 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-01-25): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=733 https://www.govcert.gov.hk/en/alerts_detail.php?id=733 Fri, 04 Feb 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A22-01-24): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=732 https://www.govcert.gov.hk/en/alerts_detail.php?id=732 Fri, 04 Feb 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A22-01-23): Multiple Vulnerabilities in Samba https://www.govcert.gov.hk/en/alerts_detail.php?id=731 https://www.govcert.gov.hk/en/alerts_detail.php?id=731 Fri, 04 Feb 2022 12:00:00 +0800 Samba released security updates to address multiple vulnerabilities in Samba.

]]> Security Alert (A22-01-22): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=730 https://www.govcert.gov.hk/en/alerts_detail.php?id=730 Thu, 27 Jan 2022 12:00:00 +0800 Apache Software Foundation has released a security advisory to address a vulnerability in the Apache Tomcat.

]]> High Threat Security Alert (A22-01-21): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=729 https://www.govcert.gov.hk/en/alerts_detail.php?id=729 Thu, 27 Jan 2022 12:00:00 +0800 Apple has released iOS 15.3 and iPadOS 15.3 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A22-01-20): Vulnerability in Linux Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=728 https://www.govcert.gov.hk/en/alerts_detail.php?id=728 Thu, 27 Jan 2022 12:00:00 +0800 A vulnerability was found in a Linux system service called polkit which is installed by default in several Linux distributions.

]]> Security Alert (A22-01-19): Vulnerability in SolarWinds Serv-U File Server https://www.govcert.gov.hk/en/alerts_detail.php?id=727 https://www.govcert.gov.hk/en/alerts_detail.php?id=727 Mon, 24 Jan 2022 12:00:00 +0800 SolarWinds has released a security advisory to address an improper input validation vulnerability (CVE-2021-35247) in Serv-U File Server.

]]> High Threat Security Alert (A22-01-18): Multiple Vulnerabilities in McAfee Agent https://www.govcert.gov.hk/en/alerts_detail.php?id=726 https://www.govcert.gov.hk/en/alerts_detail.php?id=726 Mon, 24 Jan 2022 12:00:00 +0800 McAfee has released a security advisory to address multiple vulnerabilities in McAfee Agent for Windows.

]]> High Threat Security Alert (A22-01-17): Vulnerability in Microsoft Windows https://www.govcert.gov.hk/en/alerts_detail.php?id=725 https://www.govcert.gov.hk/en/alerts_detail.php?id=725 Mon, 24 Jan 2022 12:00:00 +0800 Microsoft has released an out-of-band security update to address the vulnerability in the WinVerifyTrust function that handles Windows Authenticode signature verification for portable executable (PE) files.

]]> Security Alert (A22-01-16): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=724 https://www.govcert.gov.hk/en/alerts_detail.php?id=724 Fri, 21 Jan 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-01-15): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=723 https://www.govcert.gov.hk/en/alerts_detail.php?id=723 Thu, 20 Jan 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-01-14) Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=722 https://www.govcert.gov.hk/en/alerts_detail.php?id=722 Thu, 20 Jan 2022 12:00:00 +0800 Drupal has released a security advisory to address multiple vulnerabilities in the jQuery UI library.

]]> Security Alert (A22-01-13): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=721 https://www.govcert.gov.hk/en/alerts_detail.php?id=721 Thu, 20 Jan 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A22-01-12): Multiple Vulnerabilities in Oracle Java and Oracle Products (January 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=720 https://www.govcert.gov.hk/en/alerts_detail.php?id=720 Wed, 19 Jan 2022 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A22-01-11): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=719 https://www.govcert.gov.hk/en/alerts_detail.php?id=719 Thu, 13 Jan 2022 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A22-01-10): Vulnerability in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=718 https://www.govcert.gov.hk/en/alerts_detail.php?id=718 Thu, 13 Jan 2022 12:00:00 +0800 Apple has released iOS 15.2.1 and iPadOS 15.2.1 to fix the vulnerability in various Apple devices.

]]> Security Alert (A22-01-09): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=717 https://www.govcert.gov.hk/en/alerts_detail.php?id=717 Wed, 12 Jan 2022 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A22-01-08): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=716 https://www.govcert.gov.hk/en/alerts_detail.php?id=716 Wed, 12 Jan 2022 12:00:00 +0800 Mozilla has published the advisories (MFSA2022-01 and MFSA2022-02) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A22-01-07): Multiple Vulnerabilities in Microsoft Products (January 2022) https://www.govcert.gov.hk/en/alerts_detail.php?id=715 https://www.govcert.gov.hk/en/alerts_detail.php?id=715 Wed, 12 Jan 2022 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A22-01-06): Vulnerability in H2 Database Console https://www.govcert.gov.hk/en/alerts_detail.php?id=714 https://www.govcert.gov.hk/en/alerts_detail.php?id=714 Mon, 10 Jan 2022 12:00:00 +0800 H2 has released a security advisory to address a vulnerability in H2 database console. Reports indicate a remote code execution vulnerability in H2 database console is at high risk of exploitation.

]]> Security Alert (A22-01-05): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=713 https://www.govcert.gov.hk/en/alerts_detail.php?id=713 Fri, 07 Jan 2022 12:00:00 +0800 Google has released Android Security Bulletin January 2022 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A22-01-04): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=712 https://www.govcert.gov.hk/en/alerts_detail.php?id=712 Fri, 07 Jan 2022 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A22-01-03): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=711 https://www.govcert.gov.hk/en/alerts_detail.php?id=711 Thu, 06 Jan 2022 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware products.

]]> Security Alert (A22-01-02): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=710 https://www.govcert.gov.hk/en/alerts_detail.php?id=710 Wed, 05 Jan 2022 12:00:00 +0800 Apache has released a security update to address a vulnerability in Apache Struts.

]]> Security Alert (A22-01-01): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=709 https://www.govcert.gov.hk/en/alerts_detail.php?id=709 Wed, 05 Jan 2022 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A21-12-13): Vulnerability in Apache Log4j https://www.govcert.gov.hk/en/alerts_detail.php?id=708 https://www.govcert.gov.hk/en/alerts_detail.php?id=708 Wed, 29 Dec 2021 12:00:00 +0800 Apache Software Foundation has released a security advisory to address a vulnerability in Apache Log4j.

]]> Security Alert (A21-12-12) Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=707 https://www.govcert.gov.hk/en/alerts_detail.php?id=707 Thu, 23 Dec 2021 12:00:00 +0800 Apache has released a security update to address a vulnerability in Apache Struts.

]]> Security Alert (A21-12-11) Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=706 https://www.govcert.gov.hk/en/alerts_detail.php?id=706 Tue, 21 Dec 2021 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> High Threat Security Alert (A21-12-10): Vulnerability in Apache Log4j https://www.govcert.gov.hk/en/alerts_detail.php?id=705 https://www.govcert.gov.hk/en/alerts_detail.php?id=705 Mon, 20 Dec 2021 12:00:00 +0800 Apache Software Foundation has released a security advisory to address a vulnerability in Apache Log4j. Reports indicate that a proof-of-concept (PoC) code for a new denial of service vulnerability (CVE-2021-45105) in Apache Log4j is publicly available.

]]> High Threat Security Alert (A21-12-09): Multiple Vulnerabilities in Microsoft Products (December 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=704 https://www.govcert.gov.hk/en/alerts_detail.php?id=704 Wed, 15 Dec 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A21-12-08): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=703 https://www.govcert.gov.hk/en/alerts_detail.php?id=703 Tue, 14 Dec 2021 12:00:00 +0800 Apple has released iOS 15.2 and iPadOS 15.2 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A21-12-07): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=702 https://www.govcert.gov.hk/en/alerts_detail.php?id=702 Tue, 14 Dec 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-12-06): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=701 https://www.govcert.gov.hk/en/alerts_detail.php?id=701 Mon, 13 Dec 2021 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A21-12-05): High Threat Security Alert (A21-12-05): Vulnerability in Apache Log4j https://www.govcert.gov.hk/en/alerts_detail.php?id=700 https://www.govcert.gov.hk/en/alerts_detail.php?id=700 Fri, 10 Dec 2021 12:00:00 +0800 Apache Software Foundation has released a security advisory to address a vulnerability in Apache Log4j. Reports indicate that the vulnerability is being actively exploited and a proof-of-concept (PoC) code for the vulnerability is publicly available.

]]> Security Alert (A21-12-04): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=699 https://www.govcert.gov.hk/en/alerts_detail.php?id=699 Thu, 09 Dec 2021 12:00:00 +0800 Google has released Android Security Bulletin December 2021 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A21-12-03): Multiple Vulnerabilities in SonicWall SMA 100 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=698 https://www.govcert.gov.hk/en/alerts_detail.php?id=698 Thu, 09 Dec 2021 12:00:00 +0800 SonicWall has released a security advisory to address multiple vulnerabilities in SMA 100 series products.

]]> Security Alert (A21-12-02): Multiple vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=697 https://www.govcert.gov.hk/en/alerts_detail.php?id=697 Wed, 08 Dec 2021 12:00:00 +0800 Mozilla has published the advisories (MFSA2021-52 and MFSA2021-53) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A21-12-01): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=696 https://www.govcert.gov.hk/en/alerts_detail.php?id=696 Tue, 07 Dec 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-11-12): Multiple Vulnerabilities in VMWare Products https://www.govcert.gov.hk/en/alerts_detail.php?id=695 https://www.govcert.gov.hk/en/alerts_detail.php?id=695 Wed, 24 Nov 2021 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A21-11-11): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=694 https://www.govcert.gov.hk/en/alerts_detail.php?id=694 Mon, 22 Nov 2021 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A21-11-10) Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=693 https://www.govcert.gov.hk/en/alerts_detail.php?id=693 Thu, 18 Nov 2021 12:00:00 +0800 Drupal has released a security advisory to address multiple vulnerabilities in the CKEditor library for WYSIWYG editing.

]]> Security Alert (A21-11-09): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=692 https://www.govcert.gov.hk/en/alerts_detail.php?id=692 Tue, 16 Nov 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-11-08): Vulnerability in VMWare Products https://www.govcert.gov.hk/en/alerts_detail.php?id=691 https://www.govcert.gov.hk/en/alerts_detail.php?id=691 Fri, 12 Nov 2021 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware products.

]]> High Threat Security Alert (A21-11-07): Multiple Vulnerabilities in Microsoft Products (November 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=690 https://www.govcert.gov.hk/en/alerts_detail.php?id=690 Wed, 10 Nov 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A21-11-06): Vulnerability in Linux Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=689 https://www.govcert.gov.hk/en/alerts_detail.php?id=689 Fri, 05 Nov 2021 12:00:00 +0800 A heap-overflow vulnerability was found in the Transparent Inter-Process Communication (TIPC) module of the Linux kernel.

]]> Security Alert (A21-11-05): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=688 https://www.govcert.gov.hk/en/alerts_detail.php?id=688 Thu, 04 Nov 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A21-11-04): Multiple vulnerabilities in GitLab https://www.govcert.gov.hk/en/alerts_detail.php?id=687 https://www.govcert.gov.hk/en/alerts_detail.php?id=687 Thu, 04 Nov 2021 12:00:00 +0800 GitLab has released 13.10.3, 13.9.6 and 13.8.8 to fix the vulnerabilities in various versions of GitLab.

]]> Security Alert (A21-11-03): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=686 https://www.govcert.gov.hk/en/alerts_detail.php?id=686 Wed, 03 Nov 2021 12:00:00 +0800 Mozilla has published the advisories (MFSA2021-48 and MFSA2021-49) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A21-11-02): Multiple vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=685 https://www.govcert.gov.hk/en/alerts_detail.php?id=685 Tue, 02 Nov 2021 12:00:00 +0800 Google has released Android Security Bulletin November 2021 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A21-11-01): Multiple vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=684 https://www.govcert.gov.hk/en/alerts_detail.php?id=684 Mon, 01 Nov 2021 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A21-10-22): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=683 https://www.govcert.gov.hk/en/alerts_detail.php?id=683 Fri, 29 Oct 2021 12:00:00 +0800 ISC has released a security update to fix a vulnerability in BIND.

]]> High Threat Security Alert (A21-10-21): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=682 https://www.govcert.gov.hk/en/alerts_detail.php?id=682 Fri, 29 Oct 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-10-20): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=681 https://www.govcert.gov.hk/en/alerts_detail.php?id=681 Thu, 28 Oct 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A21-10-19): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=680 https://www.govcert.gov.hk/en/alerts_detail.php?id=680 Wed, 27 Oct 2021 12:00:00 +0800 Apple has released iOS 15.1 and iPadOS 15.1 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A21-10-18): Vulnerability in Pulse Secure Products https://www.govcert.gov.hk/en/alerts_detail.php?id=679 https://www.govcert.gov.hk/en/alerts_detail.php?id=679 Fri, 22 Oct 2021 12:00:00 +0800 Pulse Secure has published a security advisory to address a vulnerability in Pulse Connect Secure system software.

]]> Security Alert (A21-10-17): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=678 https://www.govcert.gov.hk/en/alerts_detail.php?id=678 Fri, 22 Oct 2021 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A21-10-16): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=677 https://www.govcert.gov.hk/en/alerts_detail.php?id=677 Thu, 21 Oct 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A21-10-15): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=676 https://www.govcert.gov.hk/en/alerts_detail.php?id=676 Wed, 20 Oct 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-10-14): Multiple Vulnerabilities in Oracle Java and Oracle Products (October 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=675 https://www.govcert.gov.hk/en/alerts_detail.php?id=675 Wed, 20 Oct 2021 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A21-10-13): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=674 https://www.govcert.gov.hk/en/alerts_detail.php?id=674 Mon, 18 Oct 2021 12:00:00 +0800 Apache Software Foundation has released a security advisory to address a vulnerability in the Apache Tomcat.

]]> Security Alert (A21-10-12): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=673 https://www.govcert.gov.hk/en/alerts_detail.php?id=673 Fri, 15 Oct 2021 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A21-10-11): Multiple Vulnerabilities in Microsoft Products (October 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=672 https://www.govcert.gov.hk/en/alerts_detail.php?id=672 Fri, 15 Oct 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A21-10-10): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=671 https://www.govcert.gov.hk/en/alerts_detail.php?id=671 Tue, 12 Oct 2021 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A21-10-09): Vulnerability in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=670 https://www.govcert.gov.hk/en/alerts_detail.php?id=670 Tue, 12 Oct 2021 12:00:00 +0800 Apple has released iOS 15.0.2 and iPadOS 15.0.2 to fix the vulnerability in various Apple devices.

]]> Security Alert (A21-10-08): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=669 https://www.govcert.gov.hk/en/alerts_detail.php?id=669 Fri, 08 Oct 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A21-10-07): Vulnerability in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=668 https://www.govcert.gov.hk/en/alerts_detail.php?id=668 Fri, 08 Oct 2021 12:00:00 +0800 The Apache Software Foundation released a security update to address a vulnerability in the HTTP Server and its modules.

]]> Security Alert (A21-10-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=667 https://www.govcert.gov.hk/en/alerts_detail.php?id=667 Thu, 07 Oct 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A21-10-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=666 https://www.govcert.gov.hk/en/alerts_detail.php?id=666 Wed, 06 Oct 2021 12:00:00 +0800 Mozilla has published the advisories (MFSA2021-43, MFSA2021-44 and MFSA2021-45) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A21-10-04): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=665 https://www.govcert.gov.hk/en/alerts_detail.php?id=665 Wed, 06 Oct 2021 12:00:00 +0800 Google has released Android Security Bulletin October 2021 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A21-10-03): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=664 https://www.govcert.gov.hk/en/alerts_detail.php?id=664 Wed, 06 Oct 2021 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> High Threat Security Alert (A21-10-02): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=663 https://www.govcert.gov.hk/en/alerts_detail.php?id=663 Mon, 04 Oct 2021 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A21-10-01): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=662 https://www.govcert.gov.hk/en/alerts_detail.php?id=662 Mon, 04 Oct 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A21-09-24): Multiple Vulnerabilities in SonicWall SMA 100 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=661 https://www.govcert.gov.hk/en/alerts_detail.php?id=661 Mon, 27 Sep 2021 12:00:00 +0800 SonicWall has released a security advisory to address multiple vulnerabilities in SMA 100 series products.

]]> High Threat Security Alert (A21-09-23): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=660 https://www.govcert.gov.hk/en/alerts_detail.php?id=660 Mon, 27 Sep 2021 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A21-09-22): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=659 https://www.govcert.gov.hk/en/alerts_detail.php?id=659 Mon, 27 Sep 2021 12:00:00 +0800 Google released a security update to address a vulnerability in Google Chrome.

]]> High Threat Security Alert (A21-09-21): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=658 https://www.govcert.gov.hk/en/alerts_detail.php?id=658 Fri, 24 Sep 2021 12:00:00 +0800 Apple has released iOS 12.5.5 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A21-09-20): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=657 https://www.govcert.gov.hk/en/alerts_detail.php?id=657 Thu, 23 Sep 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A21-09-19): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=656 https://www.govcert.gov.hk/en/alerts_detail.php?id=656 Thu, 23 Sep 2021 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A21-09-18): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=655 https://www.govcert.gov.hk/en/alerts_detail.php?id=655 Thu, 23 Sep 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-09-17): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=654 https://www.govcert.gov.hk/en/alerts_detail.php?id=654 Tue, 21 Sep 2021 12:00:00 +0800 Apple has released iOS 15 and iPadOS 15 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A21-09-16): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=653 https://www.govcert.gov.hk/en/alerts_detail.php?id=653 Mon, 20 Sep 2021 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> High Threat Security Alert (A21-09-15): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=652 https://www.govcert.gov.hk/en/alerts_detail.php?id=652 Fri, 17 Sep 2021 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A21-09-14): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=651 https://www.govcert.gov.hk/en/alerts_detail.php?id=651 Fri, 17 Sep 2021 12:00:00 +0800 Drupal has released a security advisory to address multiple vulnerabilities in the JSON:API, Media, QuickEdit and REST File upload modules.

]]> Security Alert (A21-09-13): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=650 https://www.govcert.gov.hk/en/alerts_detail.php?id=650 Wed, 15 Sep 2021 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A21-09-12): Multiple Vulnerabilities in Microsoft Products (September 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=649 https://www.govcert.gov.hk/en/alerts_detail.php?id=649 Wed, 15 Sep 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A21-09-11): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=648 https://www.govcert.gov.hk/en/alerts_detail.php?id=648 Tue, 14 Sep 2021 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A21-09-10): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=647 https://www.govcert.gov.hk/en/alerts_detail.php?id=647 Tue, 14 Sep 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A21-09-09): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=646 https://www.govcert.gov.hk/en/alerts_detail.php?id=646 Tue, 14 Sep 2021 12:00:00 +0800 Apple has released iOS 14.8 and iPadOS 14.8 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A21-09-08): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=645 https://www.govcert.gov.hk/en/alerts_detail.php?id=645 Fri, 10 Sep 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A21-09-07): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=644 https://www.govcert.gov.hk/en/alerts_detail.php?id=644 Fri, 10 Sep 2021 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

]]> Security Alert (A21-09-06): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=643 https://www.govcert.gov.hk/en/alerts_detail.php?id=643 Thu, 09 Sep 2021 12:00:00 +0800 Google has released Android Security Bulletin September 2021 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A21-09-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=642 https://www.govcert.gov.hk/en/alerts_detail.php?id=642 Wed, 08 Sep 2021 12:00:00 +0800 Mozilla has published the advisories (MFSA2021-38, MFSA2021-39 and MFSA2021-40) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A21-09-04): Vulnerability in Microsoft Windows https://www.govcert.gov.hk/en/alerts_detail.php?id=641 https://www.govcert.gov.hk/en/alerts_detail.php?id=641 Wed, 08 Sep 2021 12:00:00 +0800 Microsoft released a security update advisory about a remote code execution vulnerability in MSHTML that affects Microsoft Windows.

]]> Security Alert (A21-09-03): Multiple Vulnerabilities in Bluetooth devices https://www.govcert.gov.hk/en/alerts_detail.php?id=640 https://www.govcert.gov.hk/en/alerts_detail.php?id=640 Tue, 07 Sep 2021 12:00:00 +0800 Multiple vulnerabilities, collectively known as BrakTooth, are found in the implementation of Bluetooth SoC boards from multiple vendors.

]]> Security Alert (A21-09-02): Multiple Vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=639 https://www.govcert.gov.hk/en/alerts_detail.php?id=639 Fri, 03 Sep 2021 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> Security Alert (A21-09-01): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=638 https://www.govcert.gov.hk/en/alerts_detail.php?id=638 Wed, 01 Sep 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-08-15): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=637 https://www.govcert.gov.hk/en/alerts_detail.php?id=637 Fri, 27 Aug 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A21-08-14): Multiple Vulnerabilities in F5 BIG-IP https://www.govcert.gov.hk/en/alerts_detail.php?id=636 https://www.govcert.gov.hk/en/alerts_detail.php?id=636 Thu, 26 Aug 2021 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 devices.

]]> Security Alert (A21-08-13): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=635 https://www.govcert.gov.hk/en/alerts_detail.php?id=635 Thu, 26 Aug 2021 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A21-08-12): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=634 https://www.govcert.gov.hk/en/alerts_detail.php?id=634 Thu, 19 Aug 2021 12:00:00 +0800 ISC has released a security update to fix a vulnerability in BIND.

]]> Security Alert (A21-08-11): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=633 https://www.govcert.gov.hk/en/alerts_detail.php?id=633 Thu, 19 Aug 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A21-08-10): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=632 https://www.govcert.gov.hk/en/alerts_detail.php?id=632 Wed, 18 Aug 2021 12:00:00 +0800 Mozilla has published the advisory (MFSA2021-37) to address a vulnerability in Firefox browser.

]]> Security Alert (A21-08-09): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=631 https://www.govcert.gov.hk/en/alerts_detail.php?id=631 Tue, 17 Aug 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-08-08): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=630 https://www.govcert.gov.hk/en/alerts_detail.php?id=630 Mon, 16 Aug 2021 12:00:00 +0800 Drupal has released a security advisory to address a vulnerability in the CKEditor library for WYSIWYG editing.

]]> Security Alert (A21-08-07): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=629 https://www.govcert.gov.hk/en/alerts_detail.php?id=629 Wed, 11 Aug 2021 12:00:00 +0800 Mozilla has published the advisories (MFSA2021-33 and MFSA2021-34) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A21-08-06): Multiple Vulnerabilities in Microsoft Products (August 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=628 https://www.govcert.gov.hk/en/alerts_detail.php?id=628 Wed, 11 Aug 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A21-08-05): Multiple Vulnerabilities in Pulse Secure Products https://www.govcert.gov.hk/en/alerts_detail.php?id=627 https://www.govcert.gov.hk/en/alerts_detail.php?id=627 Fri, 06 Aug 2021 12:00:00 +0800 Pulse Secure has published a security advisory to address multiple vulnerabilities in Pulse Connect Secure system software.

]]> Security Alert (A21-08-04): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=626 https://www.govcert.gov.hk/en/alerts_detail.php?id=626 Fri, 06 Aug 2021 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A21-08-03): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=625 https://www.govcert.gov.hk/en/alerts_detail.php?id=625 Thu, 05 Aug 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A21-08-02): Multiple Vulnerabilities in FortiOS https://www.govcert.gov.hk/en/alerts_detail.php?id=624 https://www.govcert.gov.hk/en/alerts_detail.php?id=624 Wed, 04 Aug 2021 12:00:00 +0800 FortiNet released security advisories to address multiple vulnerabilities in FortiOS software.

]]> Security Alert (A21-08-01): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=623 https://www.govcert.gov.hk/en/alerts_detail.php?id=623 Tue, 03 Aug 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A21-07-18): Vulnerability in Microsoft Windows https://www.govcert.gov.hk/en/alerts_detail.php?id=622 https://www.govcert.gov.hk/en/alerts_detail.php?id=622 Wed, 28 Jul 2021 12:00:00 +0800 Microsoft released a security advisory to address a NTLM relay attack named PetitPotam on Windows domain controllers or other Windows servers.

]]> High Threat Security Alert (A21-07-17): Vulnerability in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=621 https://www.govcert.gov.hk/en/alerts_detail.php?id=621 Tue, 27 Jul 2021 12:00:00 +0800 Apple has released iOS 14.7.1 and iPadOS 14.7.1 to fix the vulnerability in various Apple devices.

]]> Security Alert (A21-07-16): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=620 https://www.govcert.gov.hk/en/alerts_detail.php?id=620 Fri, 23 Jul 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A21-07-15): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=619 https://www.govcert.gov.hk/en/alerts_detail.php?id=619 Fri, 23 Jul 2021 12:00:00 +0800 Drupal has released a security advisory to address a vulnerability in the pear Archive_Tar library.

]]> Security Alert (A21-07-14): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=618 https://www.govcert.gov.hk/en/alerts_detail.php?id=618 Thu, 22 Jul 2021 12:00:00 +0800 Apple has released iOS 14.7 and iPadOS 14.7 to fix the vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A21-07-13): Multiple Vulnerabilities in Linux Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=617 https://www.govcert.gov.hk/en/alerts_detail.php?id=617 Wed, 21 Jul 2021 12:00:00 +0800 Multiple vulnerabilities were found in major Linux distributions including Debian, RedHat, SUSE and Ubuntu.

]]> Security Alert (A21-07-12): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=616 https://www.govcert.gov.hk/en/alerts_detail.php?id=616 Wed, 21 Jul 2021 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A21-07-11): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=615 https://www.govcert.gov.hk/en/alerts_detail.php?id=615 Wed, 21 Jul 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A21-07-10): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=614 https://www.govcert.gov.hk/en/alerts_detail.php?id=614 Tue, 20 Jul 2021 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A21-07-09): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=613 https://www.govcert.gov.hk/en/alerts_detail.php?id=613 Fri, 16 Jul 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-07-08): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=612 https://www.govcert.gov.hk/en/alerts_detail.php?id=612 Wed, 14 Jul 2021 12:00:00 +0800 Apache Software Foundation has released a security advisory to address multiple vulnerabilities in the Apache Tomcat.

]]> Security Alert (A21-07-07): Multiple vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=611 https://www.govcert.gov.hk/en/alerts_detail.php?id=611 Wed, 14 Jul 2021 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A21-07-06): Multiple vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=610 https://www.govcert.gov.hk/en/alerts_detail.php?id=610 Wed, 14 Jul 2021 12:00:00 +0800 Mozilla has published the advisories (MFSA2021-28 and MFSA2021-29) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A21-07-05): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=609 https://www.govcert.gov.hk/en/alerts_detail.php?id=609 Wed, 14 Jul 2021 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A21-07-04): Multiple Vulnerabilities in Microsoft Products (July 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=608 https://www.govcert.gov.hk/en/alerts_detail.php?id=608 Wed, 14 Jul 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A21-07-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=607 https://www.govcert.gov.hk/en/alerts_detail.php?id=607 Thu, 08 Jul 2021 12:00:00 +0800 Google has released Android Security Bulletin July 2021 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A21-07-02): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=606 https://www.govcert.gov.hk/en/alerts_detail.php?id=606 Thu, 08 Jul 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A21-07-01): Vulnerability in Microsoft Windows https://www.govcert.gov.hk/en/alerts_detail.php?id=605 https://www.govcert.gov.hk/en/alerts_detail.php?id=605 Fri, 02 Jul 2021 12:00:00 +0800 Microsoft released a security update guide about a zero-day vulnerability in Windows Print Spooler service.

]]> High Threat Security Alert (A21-06-13): Vulnerability in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=604 https://www.govcert.gov.hk/en/alerts_detail.php?id=604 Mon, 21 Jun 2021 12:00:00 +0800 Microsoft released a security update to address a vulnerability in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A21-06-12): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=603 https://www.govcert.gov.hk/en/alerts_detail.php?id=603 Fri, 18 Jun 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-06-11): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=602 https://www.govcert.gov.hk/en/alerts_detail.php?id=602 Thu, 17 Jun 2021 12:00:00 +0800 Mozilla has published the advisory (MFSA 2021-27) to address a vulnerability in Firefox browser.

]]> Security Alert (A21-06-10): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=601 https://www.govcert.gov.hk/en/alerts_detail.php?id=601 Thu, 17 Jun 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> High Threat Security Alert (A21-06-09): Multiple vulnerabilities in Microsoft Edge (Chromium-based) https://www.govcert.gov.hk/en/alerts_detail.php?id=600 https://www.govcert.gov.hk/en/alerts_detail.php?id=600 Wed, 16 Jun 2021 12:00:00 +0800 Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based).

]]> High Threat Security Alert (A21-06-08): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=599 https://www.govcert.gov.hk/en/alerts_detail.php?id=599 Wed, 16 Jun 2021 12:00:00 +0800 Apple has released iOS 12.5.4 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A21-06-07): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=598 https://www.govcert.gov.hk/en/alerts_detail.php?id=598 Wed, 16 Jun 2021 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules.

]]> Security Alert (A21-06-06): Vulnerability in Linux Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=597 https://www.govcert.gov.hk/en/alerts_detail.php?id=597 Wed, 16 Jun 2021 12:00:00 +0800 A vulnerability was found in a Linux system service called polkit which is installed by default in several Linux distributions.

]]> High Threat Security Alert (A21-06-05): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=596 https://www.govcert.gov.hk/en/alerts_detail.php?id=596 Fri, 11 Jun 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-06-04): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=595 https://www.govcert.gov.hk/en/alerts_detail.php?id=595 Wed, 09 Jun 2021 12:00:00 +0800 Google has released Android Security Bulletin June 2021 to fix multiple security vulnerabilities in Android operating system.

]]> Security Alert (A21-06-03) Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=594 https://www.govcert.gov.hk/en/alerts_detail.php?id=594 Wed, 09 Jun 2021 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A21-06-02): Multiple Vulnerabilities in Microsoft Products (June 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=593 https://www.govcert.gov.hk/en/alerts_detail.php?id=593 Wed, 09 Jun 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A21-06-01): Multiple vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=592 https://www.govcert.gov.hk/en/alerts_detail.php?id=592 Tue, 01 Jun 2021 12:00:00 +0800 Mozilla has published the advisories (MFSA 2021-23 and MFSA 2021-24) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A21-05-14): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=591 https://www.govcert.gov.hk/en/alerts_detail.php?id=591 Wed, 26 May 2021 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A21-05-13): Multiple vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=590 https://www.govcert.gov.hk/en/alerts_detail.php?id=590 Wed, 26 May 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-05-12): Vulnerability in Pulse Secure Products https://www.govcert.gov.hk/en/alerts_detail.php?id=589 https://www.govcert.gov.hk/en/alerts_detail.php?id=589 Wed, 26 May 2021 12:00:00 +0800 Pulse Secure has released a security advisory about a buffer overflow vulnerability in Pulse Connect Secure gateway.

]]> Security Alert (A21-05-11): Multiple Vulnerabilities in Bluetooth devices https://www.govcert.gov.hk/en/alerts_detail.php?id=588 https://www.govcert.gov.hk/en/alerts_detail.php?id=588 Tue, 25 May 2021 12:00:00 +0800 Multiple vulnerabilities are found in Bluetooth devices that support the Bluetooth Core and Mesh Specifications.

]]> Security Alert (A21-05-10): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=587 https://www.govcert.gov.hk/en/alerts_detail.php?id=587 Tue, 25 May 2021 12:00:00 +0800 Apple has released iOS 14.6 and iPadOS 14.6 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A21-05-09): Multiple Vulnerabilities in Wi-Fi devices https://www.govcert.gov.hk/en/alerts_detail.php?id=586 https://www.govcert.gov.hk/en/alerts_detail.php?id=586 Thu, 13 May 2021 12:00:00 +0800 Multiple vulnerabilities are found in Wi-Fi devices that use Wi-Fi 802.11 standard.

]]> High Threat Security Alert (A21-05-08): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=585 https://www.govcert.gov.hk/en/alerts_detail.php?id=585 Wed, 12 May 2021 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A21-05-07): Multiple Vulnerabilities in Microsoft Products (May 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=584 https://www.govcert.gov.hk/en/alerts_detail.php?id=584 Wed, 12 May 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A21-05-06): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=583 https://www.govcert.gov.hk/en/alerts_detail.php?id=583 Tue, 11 May 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> Security Alert (A21-05-05): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=582 https://www.govcert.gov.hk/en/alerts_detail.php?id=582 Thu, 06 May 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A21-05-04): Vulnerability in Dell products https://www.govcert.gov.hk/en/alerts_detail.php?id=581 https://www.govcert.gov.hk/en/alerts_detail.php?id=581 Wed, 05 May 2021 12:00:00 +0800 Dell has released a security advisory update to fix an insufficient access control vulnerability in the Dell dbutil driver.

]]> Security Alert (A21-05-03): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=580 https://www.govcert.gov.hk/en/alerts_detail.php?id=580 Tue, 04 May 2021 12:00:00 +0800 Google has released Android Security Bulletin May 2021 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A21-05-02): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=579 https://www.govcert.gov.hk/en/alerts_detail.php?id=579 Tue, 04 May 2021 12:00:00 +0800 Apple has released iOS 14.5.1 and iPadOS 14.5.1 as well as iOS 12.5.3 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A21-05-01): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=578 https://www.govcert.gov.hk/en/alerts_detail.php?id=578 Mon, 03 May 2021 12:00:00 +0800 ISC has released a security update to fix a vulnerability in BIND.

]]> High Threat Security Alert (A21-04-12): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=577 https://www.govcert.gov.hk/en/alerts_detail.php?id=577 Thu, 29 Apr 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco devices and software.

]]> Security Alert (A21-04-11): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=576 https://www.govcert.gov.hk/en/alerts_detail.php?id=576 Tue, 27 Apr 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A21-04-10): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=575 https://www.govcert.gov.hk/en/alerts_detail.php?id=575 Tue, 27 Apr 2021 12:00:00 +0800 Apple has released iOS 14.5 and iPadOS 14.5 to fix the vulnerabilities in various Apple devices.

]]> Security Alert (A21-04-09): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=574 https://www.govcert.gov.hk/en/alerts_detail.php?id=574 Fri, 23 Apr 2021 12:00:00 +0800 Drupal has released a security advisory to address a vulnerability of improper sanitisation of API requests in Drupal Core.

]]> High Threat Security Alert (A21-04-08): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=573 https://www.govcert.gov.hk/en/alerts_detail.php?id=573 Wed, 21 Apr 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A21-04-07): Multiple Vulnerabilities in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=572 https://www.govcert.gov.hk/en/alerts_detail.php?id=572 Wed, 21 Apr 2021 12:00:00 +0800 SonicWall has released a security advisory about the zero-day vulnerabilities in Email Security products.

]]> Security Alert (A21-04-06): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=571 https://www.govcert.gov.hk/en/alerts_detail.php?id=571 Wed, 21 Apr 2021 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> High Threat Security Alert (A21-04-05): Vulnerability in Pulse Secure Products https://www.govcert.gov.hk/en/alerts_detail.php?id=570 https://www.govcert.gov.hk/en/alerts_detail.php?id=570 Wed, 21 Apr 2021 12:00:00 +0800 Pulse Secure has released a security advisory about a zero-day vulnerability in Pulse Connect Secure appliances.

]]> Security Alert (A21-04-04): Multiple vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=569 https://www.govcert.gov.hk/en/alerts_detail.php?id=569 Tue, 20 Apr 2021 12:00:00 +0800 Mozilla has published the advisories (MFSA 2021-15 and MFSA 2021-16) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A21-04-03): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=568 https://www.govcert.gov.hk/en/alerts_detail.php?id=568 Wed, 14 Apr 2021 12:00:00 +0800

]]> High Threat Security Alert (A21-04-02): Multiple Vulnerabilities in Microsoft Products https://www.govcert.gov.hk/en/alerts_detail.php?id=567 https://www.govcert.gov.hk/en/alerts_detail.php?id=567 Wed, 14 Apr 2021 12:00:00 +0800

]]> Security Alert (A21-04-01): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=566 https://www.govcert.gov.hk/en/alerts_detail.php?id=566 Fri, 09 Apr 2021 12:00:00 +0800

]]> High Threat Security Alert (A21-03-10): Vulnerability in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=565 https://www.govcert.gov.hk/en/alerts_detail.php?id=565 Mon, 29 Mar 2021 12:00:00 +0800

]]> Security Alert (A21-03-09): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=564 https://www.govcert.gov.hk/en/alerts_detail.php?id=564 Thu, 25 Mar 2021 12:00:00 +0800

]]> Security Alert (A21-03-08): Multiple vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=563 https://www.govcert.gov.hk/en/alerts_detail.php?id=563 Wed, 24 Mar 2021 12:00:00 +0800

]]> High Threat Security Alert (A21-03-07): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=562 https://www.govcert.gov.hk/en/alerts_detail.php?id=562 Mon, 15 Mar 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in the tab groups implementation, the WebRTC and the Blink components of the Google Chrome.

]]> High Threat Security Alert (A21-03-06): Multiple Vulnerabilities in F5 BIG-IP https://www.govcert.gov.hk/en/alerts_detail.php?id=561 https://www.govcert.gov.hk/en/alerts_detail.php?id=561 Fri, 12 Mar 2021 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in F5 devices.

]]> High Threat Security Alert (A21-03-05): Multiple Vulnerabilities in Microsoft Products (March 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=560 https://www.govcert.gov.hk/en/alerts_detail.php?id=560 Wed, 10 Mar 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A21-03-03): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=558 https://www.govcert.gov.hk/en/alerts_detail.php?id=558 Wed, 03 Mar 2021 12:00:00 +0800 Apache Software Foundation has released a security advisory to address multiple vulnerabilities in the Apache Tomcat.

]]> High Threat Security Alert (A21-03-02): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=557 https://www.govcert.gov.hk/en/alerts_detail.php?id=557 Wed, 03 Mar 2021 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in Google Chrome.

]]> High Threat Security Alert (A21-03-01): Multiple Vulnerabilities in Microsoft Exchange Server https://www.govcert.gov.hk/en/alerts_detail.php?id=556 https://www.govcert.gov.hk/en/alerts_detail.php?id=556 Wed, 03 Mar 2021 12:00:00 +0800 Microsoft has released an out-of-band security updates addressing multiple vulnerabilities in Microsoft Exchange Server.

]]> Security Alert (A21-02-10): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=555 https://www.govcert.gov.hk/en/alerts_detail.php?id=555 Thu, 25 Feb 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco Application Services Engine, Cisco products running NX-OS, Cisco products running FX-OS and Cisco Nexus 9000 Series.

]]> Security Alert (A21-02-09): Multiple vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=554 https://www.govcert.gov.hk/en/alerts_detail.php?id=554 Wed, 24 Feb 2021 12:00:00 +0800 Mozilla has published the advisories (MFSA 2021-07 and MFSA 2021-08) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A21-02-08): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=553 https://www.govcert.gov.hk/en/alerts_detail.php?id=553 Wed, 24 Feb 2021 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A21-02-07): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=552 https://www.govcert.gov.hk/en/alerts_detail.php?id=552 Thu, 18 Feb 2021 12:00:00 +0800 ISC has released a security update to fix a vulnerability in BIND.

]]> High Threat Security Alert (A21-02-06): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=551 https://www.govcert.gov.hk/en/alerts_detail.php?id=551 Wed, 10 Feb 2021 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A21-02-05): Multiple Vulnerabilities in Microsoft Products (February 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=550 https://www.govcert.gov.hk/en/alerts_detail.php?id=550 Wed, 10 Feb 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A21-02-04): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=549 https://www.govcert.gov.hk/en/alerts_detail.php?id=549 Tue, 09 Feb 2021 12:00:00 +0800 Mozilla has published an advisory (MFSA 2021-06) to address a vulnerability in Firefox browser.

]]> High Threat Security Alert (A21-02-03): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=548 https://www.govcert.gov.hk/en/alerts_detail.php?id=548 Mon, 08 Feb 2021 12:00:00 +0800 Google released a security update to address a heap buffer overflow vulnerability in the JavaScript and WebAssembly engine V8 of the Google Chrome.

]]> Security Alert (A21-02-02): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=547 https://www.govcert.gov.hk/en/alerts_detail.php?id=547 Mon, 08 Feb 2021 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco product running Cisco IOS XR, NX-OS, UCS Central software, and Cisco Small Business RV series routers.

]]> High Threat Security Alert (A21-02-01): Multiple Vulnerabilities in SolarWinds Orion Platform software https://www.govcert.gov.hk/en/alerts_detail.php?id=546 https://www.govcert.gov.hk/en/alerts_detail.php?id=546 Thu, 04 Feb 2021 12:00:00 +0800 SolarWinds has released security updates to address the vulnerability "SUNBURST" on Orion Platform software as well as the malware "SUPERNOVA" which exploits another vulnerability in SolarWinds Orion Platform software.

]]> High Threat Security Alert (A21-01-09): Multiple Vulnerabilities in SonicWall SMA 100 Series Products https://www.govcert.gov.hk/en/alerts_detail.php?id=545 https://www.govcert.gov.hk/en/alerts_detail.php?id=545 Fri, 29 Jan 2021 12:00:00 +0800 SonicWall has released a security advisory about probable zero-day vulnerabilities in SMA 100 Series products.

]]> High Threat Security Alert (A21-01-08): Vulnerability in Sudo https://www.govcert.gov.hk/en/alerts_detail.php?id=544 https://www.govcert.gov.hk/en/alerts_detail.php?id=544 Wed, 27 Jan 2021 12:00:00 +0800 A heap-based buffer overflow vulnerability was identified in Sudo package.

]]> High Threat Security Alert (A21-01-07): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=543 https://www.govcert.gov.hk/en/alerts_detail.php?id=543 Wed, 27 Jan 2021 12:00:00 +0800 Apple has released iOS 14.4 and iPadOS 14.4 to fix multiple vulnerabilities in various Apple devices.

]]> Security Alert (A21-01-06): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=542 https://www.govcert.gov.hk/en/alerts_detail.php?id=542 Wed, 27 Jan 2021 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2021-03 and MFSA 2021-04) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A21-01-02): Multiple Vulnerabilities in Microsoft Products (January 2021) https://www.govcert.gov.hk/en/alerts_detail.php?id=538 https://www.govcert.gov.hk/en/alerts_detail.php?id=538 Wed, 13 Jan 2021 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A21-01-01): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=537 https://www.govcert.gov.hk/en/alerts_detail.php?id=537 Thu, 07 Jan 2021 12:00:00 +0800 Mozilla has published a security advisory (MFSA 2021-01) to address a vulnerability in Firefox browser.

]]> Security Alert (A20-12-06): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=536 https://www.govcert.gov.hk/en/alerts_detail.php?id=536 Wed, 16 Dec 2020 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2020-54 and MFSA 2020-55) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A20-12-05): Vulnerability in SolarWinds Orion Platform software https://www.govcert.gov.hk/en/alerts_detail.php?id=535 https://www.govcert.gov.hk/en/alerts_detail.php?id=535 Tue, 15 Dec 2020 12:00:00 +0800 SolarWinds has released a security advisory warning customers about a supply chain attack on SolarWinds Orion Platform software.

]]> Security Alert (A20-12-04): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=534 https://www.govcert.gov.hk/en/alerts_detail.php?id=534 Tue, 15 Dec 2020 12:00:00 +0800 Apple has released iOS 14.3 and iPadOS 14.3 as well as iOS 12.5 to fix multiple vulnerabilities in various Apple devices.

]]> Security Alert (A20-12-03): Vulnerability in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=533 https://www.govcert.gov.hk/en/alerts_detail.php?id=533 Thu, 10 Dec 2020 12:00:00 +0800 Security update are released for Adobe Reader and Acrobat to address an input validation vulnerability.

]]> Security Alert (A20-12-02): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=532 https://www.govcert.gov.hk/en/alerts_detail.php?id=532 Wed, 09 Dec 2020 12:00:00 +0800 Apache has released the security bulletin (S2-061) to address a vulnerability in Apache Struts.

]]> Security Alert (A20-12-01): Multiple Vulnerabilities in Microsoft Products (December 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=531 https://www.govcert.gov.hk/en/alerts_detail.php?id=531 Wed, 09 Dec 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A20-11-08): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=530 https://www.govcert.gov.hk/en/alerts_detail.php?id=530 Mon, 30 Nov 2020 12:00:00 +0800 Drupal has released a security advisory to address two vulnerabilities in PEAR Archive_Tar library which is used in Drupal Core by default.

]]> Security Alert (A20-11-07): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=529 https://www.govcert.gov.hk/en/alerts_detail.php?id=529 Thu, 19 Nov 2020 12:00:00 +0800 Drupal has released a security advisory to address a vulnerability of improper sanitisation of filenames on uploaded files in Drupal Core.

]]> Security Alert (A20-11-06): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=528 https://www.govcert.gov.hk/en/alerts_detail.php?id=528 Wed, 18 Nov 2020 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2020-50 and MFSA 2020-51) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A20-11-05): Multiple Vulnerabilities in Palo Alto PAN-OS https://www.govcert.gov.hk/en/alerts_detail.php?id=527 https://www.govcert.gov.hk/en/alerts_detail.php?id=527 Thu, 12 Nov 2020 12:00:00 +0800 Palo Alto has published security advisories to address multiple vulnerabilities in PAN-OS.

]]> High Threat Security Alert (A20-11-04): Multiple Vulnerabilities in Microsoft Products (November 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=526 https://www.govcert.gov.hk/en/alerts_detail.php?id=526 Wed, 11 Nov 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A20-11-03): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=525 https://www.govcert.gov.hk/en/alerts_detail.php?id=525 Tue, 10 Nov 2020 12:00:00 +0800 Mozilla has published a security advisory (MFSA 2020-49) to address a vulnerability in Firefox browser.

]]> High Threat Security Alert (A20-11-02): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=524 https://www.govcert.gov.hk/en/alerts_detail.php?id=524 Fri, 06 Nov 2020 12:00:00 +0800 Apple has released both iOS 14.2 and iPadOS 14.2 as well as iOS 12.4.9 to fix multiple vulnerabilities in various Apple devices.

]]> Security Alert (A20-11-01): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=523 https://www.govcert.gov.hk/en/alerts_detail.php?id=523 Wed, 04 Nov 2020 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A20-10-07): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=522 https://www.govcert.gov.hk/en/alerts_detail.php?id=522 Thu, 22 Oct 2020 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco product running Cisco FXOS Software, Cisco Adaptive Security Appliance (ASA) Software, Firepower Threat Defense (FTD) Software or Cisco Firepower Management Center (FMC) Software.

]]> High Threat Security Alert (A20-10-06): Multiple Vulnerabilities in Oracle Java and Oracle Products (October 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=521 https://www.govcert.gov.hk/en/alerts_detail.php?id=521 Wed, 21 Oct 2020 12:00:00 +0800 Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A20-10-05): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=520 https://www.govcert.gov.hk/en/alerts_detail.php?id=520 Wed, 21 Oct 2020 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A20-10-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=519 https://www.govcert.gov.hk/en/alerts_detail.php?id=519 Wed, 21 Oct 2020 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2020-45 and MFSA 2020-46) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A20-10-03): Vulnerability in SonicWall Products https://www.govcert.gov.hk/en/alerts_detail.php?id=518 https://www.govcert.gov.hk/en/alerts_detail.php?id=518 Thu, 15 Oct 2020 12:00:00 +0800 SonicWall released a security advisory to address a buffer overflow vulnerability in SonicOS which is the operating system for SonicWall firewalls.

]]> Security Alert (A20-10-02): Vulnerability in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=517 https://www.govcert.gov.hk/en/alerts_detail.php?id=517 Wed, 14 Oct 2020 12:00:00 +0800 Adobe has released security updates to address a vulnerability in Adobe Flash Player.

]]> High Threat Security Alert (A20-10-01): Multiple Vulnerabilities in Microsoft Products (October 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=516 https://www.govcert.gov.hk/en/alerts_detail.php?id=516 Wed, 14 Oct 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A20-09-08): Multiple Vulnerabilities in FortiGate and FortiOS https://www.govcert.gov.hk/en/alerts_detail.php?id=515 https://www.govcert.gov.hk/en/alerts_detail.php?id=515 Mon, 28 Sep 2020 12:00:00 +0800 FortiNet released security advisories to address multiple vulnerabilities in FortiGate and FortiOS software.

]]> Security Alert (A20-09-07): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=514 https://www.govcert.gov.hk/en/alerts_detail.php?id=514 Fri, 25 Sep 2020 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco products running Cisco IOS and IOS XE.

]]> Security Alert (A20-09-06): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=513 https://www.govcert.gov.hk/en/alerts_detail.php?id=513 Wed, 23 Sep 2020 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2020-42 and MFSA 2020-43) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A20-09-05): Multiple Vulnerabilities in Citrix Products https://www.govcert.gov.hk/en/alerts_detail.php?id=512 https://www.govcert.gov.hk/en/alerts_detail.php?id=512 Fri, 18 Sep 2020 12:00:00 +0800 Multiple vulnerabilities have been found in Citrix Application Delivery Controller, Citrix Gateway and Citrix SD-WAN WANOP.

]]> Security Alert (A20-09-04): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=511 https://www.govcert.gov.hk/en/alerts_detail.php?id=511 Thu, 17 Sep 2020 12:00:00 +0800 Drupal has released security advisories to address multiple vulnerabilities in Drupal Core.

]]> Security Alert (A20-09-03): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=510 https://www.govcert.gov.hk/en/alerts_detail.php?id=510 Thu, 17 Sep 2020 12:00:00 +0800 Apple has released iOS 14 and iPadOS 14 to fix multiple vulnerabilities in various Apple devices.

]]> Security Alert (A20-09-02): Multiple Vulnerabilities in Palo Alto PAN-OS https://www.govcert.gov.hk/en/alerts_detail.php?id=509 https://www.govcert.gov.hk/en/alerts_detail.php?id=509 Thu, 10 Sep 2020 12:00:00 +0800 Palo Alto has published security advisories to address multiple vulnerabilities in PAN-OS.

]]> Security Alert (A20-09-01): Multiple Vulnerabilities in Microsoft Products (September 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=508 https://www.govcert.gov.hk/en/alerts_detail.php?id=508 Wed, 09 Sep 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A20-08-09): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=507 https://www.govcert.gov.hk/en/alerts_detail.php?id=507 Mon, 31 Aug 2020 12:00:00 +0800 Cisco released a security advisory to address a vulnerability in Cisco IOS XR software.

]]> Security Alert (A20-08-08): Multiple Vulnerabilities in Pulse Secure Products https://www.govcert.gov.hk/en/alerts_detail.php?id=506 https://www.govcert.gov.hk/en/alerts_detail.php?id=506 Thu, 27 Aug 2020 12:00:00 +0800 Pulse Secure released security advisories to address multiple vulnerabilities in the Pulse Connect Secure and Pulse Policy Secure server software.

]]> Security Alert (A20-08-07): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=505 https://www.govcert.gov.hk/en/alerts_detail.php?id=505 Thu, 27 Aug 2020 12:00:00 +0800 Cisco released 7 security advisories to address vulnerabilities in Cisco products running FXOS and NX-OS as well as those in Cisco Nexus 3000 and 9000 series switches.

]]> Security Alert (A20-08-06): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=504 https://www.govcert.gov.hk/en/alerts_detail.php?id=504 Wed, 26 Aug 2020 12:00:00 +0800 Mozilla has published three security advisories (MFSA 2020-36, MFSA 2020-37 and MFSA 2020-38) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A20-08-05): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=503 https://www.govcert.gov.hk/en/alerts_detail.php?id=503 Fri, 21 Aug 2020 12:00:00 +0800 ISC has released security updates to fix multiple security vulnerabilities in BIND.

]]> Security Alert (A20-08-04): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=502 https://www.govcert.gov.hk/en/alerts_detail.php?id=502 Mon, 17 Aug 2020 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the HTTP Server and its modules, including mod_proxy_uwsgi and mod_http2.

]]> Security Alert (A20-08-03): Multiple Vulnerabilities in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=501 https://www.govcert.gov.hk/en/alerts_detail.php?id=501 Fri, 14 Aug 2020 12:00:00 +0800 Apache has released the security bulletins (S2-059, S2-060) to address the vulnerabilities in Apache Struts.

]]> Security Alert (A20-08-02): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=500 https://www.govcert.gov.hk/en/alerts_detail.php?id=500 Wed, 12 Aug 2020 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A20-08-01): Multiple Vulnerabilities in Microsoft Products (August 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=499 https://www.govcert.gov.hk/en/alerts_detail.php?id=499 Wed, 12 Aug 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A20-07-09): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=498 https://www.govcert.gov.hk/en/alerts_detail.php?id=498 Wed, 29 Jul 2020 12:00:00 +0800 Mozilla has published three security advisories (MFSA 2020-30, MFSA 2020-31 and MFSA 2020-32) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A20-07-08): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=497 https://www.govcert.gov.hk/en/alerts_detail.php?id=497 Fri, 24 Jul 2020 12:00:00 +0800 Cisco released security advisories to address vulnerabilities in the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software as well as in the Treck IP stack implementation.

]]> Security Alert (A20-07-07): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=496 https://www.govcert.gov.hk/en/alerts_detail.php?id=496 Thu, 16 Jul 2020 12:00:00 +0800 Apple has released iOS 13.6 and iPadOS 13.6 to fix multiple vulnerabilities in various Apple devices.

]]> Security Alert (A20-07-06): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=495 https://www.govcert.gov.hk/en/alerts_detail.php?id=495 Wed, 15 Jul 2020 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> High Threat Security Alert (A20-07-05): Multiple Vulnerabilities in Microsoft Products (July 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=494 https://www.govcert.gov.hk/en/alerts_detail.php?id=494 Wed, 15 Jul 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A20-07-04): Multiple Vulnerabilities in Citrix Products https://www.govcert.gov.hk/en/alerts_detail.php?id=493 https://www.govcert.gov.hk/en/alerts_detail.php?id=493 Wed, 08 Jul 2020 12:00:00 +0800 Multiple vulnerabilities have been found in Citrix Application Delivery Controller, Citrix Gateway and Citrix SD-WAN WANOP.

]]> High Threat Security Alert (A20-07-03): Multiple Vulnerabilities in F5 BIG-IP https://www.govcert.gov.hk/en/alerts_detail.php?id=492 https://www.govcert.gov.hk/en/alerts_detail.php?id=492 Fri, 03 Jul 2020 12:00:00 +0800 F5 has published security advisories to address multiple vulnerabilities in the Traffic Management User Interface (TMUI) of F5 BIG-IP system.

]]> Security Alert (A20-07-02): Vulnerability in Palo Alto PAN-OS https://www.govcert.gov.hk/en/alerts_detail.php?id=491 https://www.govcert.gov.hk/en/alerts_detail.php?id=491 Thu, 02 Jul 2020 12:00:00 +0800 Palo Alto has published a security advisory to address a Security Assertion Markup Language (SAML) authentication vulnerability in PAN-OS.

]]> Security Alert (A20-07-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=490 https://www.govcert.gov.hk/en/alerts_detail.php?id=490 Thu, 02 Jul 2020 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2020-24 and MFSA 2020-25) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A20-06-11): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=489 https://www.govcert.gov.hk/en/alerts_detail.php?id=489 Mon, 29 Jun 2020 12:00:00 +0800 Apache Software Foundation has released new versions of Apache Tomcat 8.5 and 9 to address a vulnerability in the Apache Tomcat.

]]> Security Alert (A20-06-10): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=488 https://www.govcert.gov.hk/en/alerts_detail.php?id=488 Wed, 24 Jun 2020 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in VMware products.

]]> Security Alert (A20-06-09): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=487 https://www.govcert.gov.hk/en/alerts_detail.php?id=487 Thu, 18 Jun 2020 12:00:00 +0800 Drupal has released security advisories to address multiple vulnerabilities in Drupal Core.

]]> Security Alert (A20-06-08): Vulnerability in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=486 https://www.govcert.gov.hk/en/alerts_detail.php?id=486 Wed, 10 Jun 2020 12:00:00 +0800 Adobe has released security updates to address a vulnerability in Adobe Flash Player.

]]> High Threat Security Alert (A20-06-07): Multiple Vulnerabilities in Microsoft Products (June 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=485 https://www.govcert.gov.hk/en/alerts_detail.php?id=485 Wed, 10 Jun 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A20-06-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=484 https://www.govcert.gov.hk/en/alerts_detail.php?id=484 Thu, 04 Jun 2020 12:00:00 +0800 Cisco released 38 security advisories to address multiple vulnerabilities in Cisco products running Cisco IOS, IOS XE, IOS XR, NX-OS software and Cisco IOx application environment.

]]> Security Alert (A20-06-05): Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=483 https://www.govcert.gov.hk/en/alerts_detail.php?id=483 Wed, 03 Jun 2020 12:00:00 +0800 Google has released Android Security Bulletin June 2020 to fix multiple security vulnerabilities in Android operating system.

]]> High Threat Security Alert (A20-06-04): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=482 https://www.govcert.gov.hk/en/alerts_detail.php?id=482 Wed, 03 Jun 2020 12:00:00 +0800 Cisco released security advisory to address a vulnerability in Cisco NX-OS Software.

]]> Security Alert (A20-06-03): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=481 https://www.govcert.gov.hk/en/alerts_detail.php?id=481 Wed, 03 Jun 2020 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2020-20 and MFSA 2020-21) to address multiple vulnerabilities in Firefox browser.

]]> Security Alert (A20-06-02): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=479 https://www.govcert.gov.hk/en/alerts_detail.php?id=479 Tue, 02 Jun 2020 12:00:00 +0800 VMware has published a security advisory to address a Time-of-check Time-of-use (TOCTOU) issue in the service opener, an issue in the shader functionality and a memory leak vulnerability in the VMCI module.

]]> Security Alert (A20-06-01): Vulnerability in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=478 https://www.govcert.gov.hk/en/alerts_detail.php?id=478 Tue, 02 Jun 2020 12:00:00 +0800 Apple has released iOS 13.5.1 and iPadOS 13.5.1 to fix a security vulnerability in various Apple devices.

]]> Security Alert (A20-05-06): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=477 https://www.govcert.gov.hk/en/alerts_detail.php?id=477 Wed, 27 May 2020 12:00:00 +0800 Apple has released iOS 12.4.7, iOS 13.5 and iPadOS 13.5 to fix multiple security vulnerabilities in various Apple devices.

]]> Security Alert (A20-05-05): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=476 https://www.govcert.gov.hk/en/alerts_detail.php?id=476 Fri, 22 May 2020 12:00:00 +0800 Drupal has released security advisories to address cross site scripting and open redirect vulnerabilities in the jQuery library and the “drupal_goto” function of Drupal Core.

]]> Security Alert (A20-05-04): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=475 https://www.govcert.gov.hk/en/alerts_detail.php?id=475 Wed, 20 May 2020 12:00:00 +0800 A vulnerability was found in Internet Systems Consortium (ISC) BIND software.

]]> Security Alert (A20-05-03): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=474 https://www.govcert.gov.hk/en/alerts_detail.php?id=474 Wed, 13 May 2020 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A20-05-02): Multiple Vulnerabilities in Microsoft Products (May 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=473 https://www.govcert.gov.hk/en/alerts_detail.php?id=473 Wed, 13 May 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A20-05-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=472 https://www.govcert.gov.hk/en/alerts_detail.php?id=472 Wed, 06 May 2020 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2020-16 and MFSA 2020-17) to address multiple vulnerabilities in Firefox browser.

]]> High Theat Security Alert (A20-04-06): Vulnerability in Sophos XG Firewall https://www.govcert.gov.hk/en/alerts_detail.php?id=471 https://www.govcert.gov.hk/en/alerts_detail.php?id=471 Tue, 28 Apr 2020 12:00:00 +0800 Sophos has released a security hotfix to address a SQL injection vulnerability in Sophos XG Firewall firmware.

]]> Security Alert (A20-04-05): Vulnerability in Squid https://www.govcert.gov.hk/en/alerts_detail.php?id=470 https://www.govcert.gov.hk/en/alerts_detail.php?id=470 Tue, 28 Apr 2020 12:00:00 +0800 Squid has published a security advisory (SQUID-2020:4) to address an integer overflow vulnerability.

]]> Security Alert (A20-04-04): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=469 https://www.govcert.gov.hk/en/alerts_detail.php?id=469 Wed, 15 Apr 2020 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> High Threat Security Alert (A20-04-03): Multiple Vulnerabilities in Microsoft Products (April 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=468 https://www.govcert.gov.hk/en/alerts_detail.php?id=468 Wed, 15 Apr 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. These security updates addressed multiple remote code execution vulnerabilities that are under active exploitation.

]]> Security Alert (A20-04-02): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=467 https://www.govcert.gov.hk/en/alerts_detail.php?id=467 Wed, 08 Apr 2020 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2020-12, MFSA 2020-13) to address multiple vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A20-04-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=466 https://www.govcert.gov.hk/en/alerts_detail.php?id=466 Mon, 06 Apr 2020 12:00:00 +0800 Mozilla has published the security advisory (MFSA 2020-11) to address the use-after-free vulnerabilities in Firefox browser.

]]> High Threat Security Alert (A20-03-09): Multiple Vulnerabilities in Red Hat JBoss https://www.govcert.gov.hk/en/alerts_detail.php?id=465 https://www.govcert.gov.hk/en/alerts_detail.php?id=465 Fri, 27 Mar 2020 12:00:00 +0800 Red Hat has released new versions of JBoss Enterprise Application Platform to address multiple vulnerabilities in the Apache JServ Protocol (AJP), Apache Thrift and OpenSSL security provider.

]]> Security Alert (A20-03-08): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=464 https://www.govcert.gov.hk/en/alerts_detail.php?id=464 Wed, 25 Mar 2020 12:00:00 +0800 Apple has released iOS 13.4 and iPadOS 13.4 to fix multiple security vulnerabilities in various Apple devices.

]]> Security Alert (A20-03-07): Multiple Vulnerabilities in Microsoft Windows https://www.govcert.gov.hk/en/alerts_detail.php?id=463 https://www.govcert.gov.hk/en/alerts_detail.php?id=463 Tue, 24 Mar 2020 12:00:00 +0800 Multiple vulnerabilities have been found in the Microsoft Windows Adobe Type Manager library.

]]> Security Alert (A20-03-06): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=462 https://www.govcert.gov.hk/en/alerts_detail.php?id=462 Thu, 19 Mar 2020 12:00:00 +0800 Drupal has released a security update to fix the vulnerability in the third-party CKEditor library.

]]> Security Alert (A20-03-05): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=461 https://www.govcert.gov.hk/en/alerts_detail.php?id=461 Wed, 18 Mar 2020 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A20-03-04): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=460 https://www.govcert.gov.hk/en/alerts_detail.php?id=460 Tue, 17 Mar 2020 12:00:00 +0800 VMware has published a security advisory to address use-after-free vulnerability in vmnetdhcp, improper file permissions in Cortado Thinprint, and improper protection for the configuration files of the VMware USB arbitration service.

]]> Security Alert (A20-03-03): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=459 https://www.govcert.gov.hk/en/alerts_detail.php?id=459 Wed, 11 Mar 2020 12:00:00 +0800 Mozilla has published two security advisories to address multiple browser vulnerabilities.

]]> High Threat Security Alert (A20-03-02): Multiple Vulnerabilities in Microsoft Products (March 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=458 https://www.govcert.gov.hk/en/alerts_detail.php?id=458 Wed, 11 Mar 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. Reports indicate that active exploitation against the vulnerability in Microsoft Exchange Server for remote code execution have been observed. Microsoft also identified a new vulnerability in its Server Message Block 3.1.1 (SMBv3) protocol.

]]> Security Alert (A20-03-01): Vulnerability in Point-to-Point Protocol Daemon (pppd) https://www.govcert.gov.hk/en/alerts_detail.php?id=457 https://www.govcert.gov.hk/en/alerts_detail.php?id=457 Fri, 06 Mar 2020 12:00:00 +0800 A vulnerability was found in Extensible Authentication Protocol (EAP) packet processing in eap_request and eap_response of the pppd (Point-to-Point Protocol Daemon).

]]> Security Alert (A20-02-08): Vulnerability in Broadcom and Cypress Wireless Chipset https://www.govcert.gov.hk/en/alerts_detail.php?id=456 https://www.govcert.gov.hk/en/alerts_detail.php?id=456 Thu, 27 Feb 2020 12:00:00 +0800 ESET has published a security report revealing technical details about a vulnerability in FullMAC wireless chipset manufactured by Broadcom and Cypress.

]]> High Threat Security Alert (A20-02-07): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=455 https://www.govcert.gov.hk/en/alerts_detail.php?id=455 Thu, 27 Feb 2020 12:00:00 +0800 Google released a security update to address multiple vulnerabilities in ICU, streams and V8 of the Google Chrome.

]]> High Threat Security Alert (A20-02-06): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=454 https://www.govcert.gov.hk/en/alerts_detail.php?id=454 Mon, 24 Feb 2020 12:00:00 +0800 Apache Software Foundation has released new versions of Apache Tomcat 7, 8.5 and 9 to address a vulnerability in the Apache JServ Protocol (AJP).

]]> Security Alert (A20-02-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=453 https://www.govcert.gov.hk/en/alerts_detail.php?id=453 Wed, 12 Feb 2020 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2020-05 and MFSA 2020-06) to address multiple browser vulnerabilities.

]]> Security Alert (A20-02-04): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=452 https://www.govcert.gov.hk/en/alerts_detail.php?id=452 Wed, 12 Feb 2020 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A20-02-03): Multiple Vulnerabilities in Microsoft Products (February 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=451 https://www.govcert.gov.hk/en/alerts_detail.php?id=451 Wed, 12 Feb 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A20-02-02): Vulnerability in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=450 https://www.govcert.gov.hk/en/alerts_detail.php?id=450 Tue, 11 Feb 2020 12:00:00 +0800 A vulnerability called BlueFrag was found in some Android systems.

]]> Security Alert (A20-02-01): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=449 https://www.govcert.gov.hk/en/alerts_detail.php?id=449 Thu, 06 Feb 2020 12:00:00 +0800 Cisco released security advisories to address the vulnerabilities in the Cisco Discovery Protocol implementation of several Cisco products.

]]> Security Alert (A20-01-06): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=448 https://www.govcert.gov.hk/en/alerts_detail.php?id=448 Wed, 29 Jan 2020 12:00:00 +0800 Apple has released iOS 13.3.1 and iPadOS 13.3.1 to fix multiple security vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A20-01-05): Vulnerability in Microsoft Internet Explorer https://www.govcert.gov.hk/en/alerts_detail.php?id=447 https://www.govcert.gov.hk/en/alerts_detail.php?id=447 Mon, 20 Jan 2020 12:00:00 +0800 Microsoft has published a security advisory (ADV200001) to mitigate a remote code execution vulnerability in the JScript.dll of the Microsoft Internet Explorer.

]]> Security Alert (A20-01-04): Multiple Vulnerabilities in Oracle Java and Oracle Products (January 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=446 https://www.govcert.gov.hk/en/alerts_detail.php?id=446 Wed, 15 Jan 2020 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> High Threat Security Alert (A20-01-03): Multiple Vulnerabilities in Microsoft Products (January 2020) https://www.govcert.gov.hk/en/alerts_detail.php?id=445 https://www.govcert.gov.hk/en/alerts_detail.php?id=445 Wed, 15 Jan 2020 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A20-01-02): Vulnerability in Citrix Application Delivery Controller and Citrix Gateway https://www.govcert.gov.hk/en/alerts_detail.php?id=444 https://www.govcert.gov.hk/en/alerts_detail.php?id=444 Mon, 13 Jan 2020 12:00:00 +0800 A vulnerability has been found in Citrix ADC and Citrix Gateway.

]]> High Threat Security Alert (A20-01-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=443 https://www.govcert.gov.hk/en/alerts_detail.php?id=443 Wed, 08 Jan 2020 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2020-01 and MFSA 2020-02) to address multiple browser vulnerabilities. Reports indicate that active exploitation against the vulnerability has been observed.

]]> Security Alert (A19-12-06): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=442 https://www.govcert.gov.hk/en/alerts_detail.php?id=442 Thu, 19 Dec 2019 12:00:00 +0800 Drupal released security updates to fix vulnerabilities resided in the Drupal Core and its modules.

]]> Security Alert (A19-12-05): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=441 https://www.govcert.gov.hk/en/alerts_detail.php?id=441 Wed, 11 Dec 2019 12:00:00 +0800 Apple has released iOS 12.4.4, iOS 13.3 and iPadOS 13.3 to fix multiple security vulnerabilities in various Apple devices.

]]> Security Alert (A19-12-04): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=440 https://www.govcert.gov.hk/en/alerts_detail.php?id=440 Wed, 11 Dec 2019 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A19-12-03): Multiple Vulnerabilities in Microsoft Products (December 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=439 https://www.govcert.gov.hk/en/alerts_detail.php?id=439 Wed, 11 Dec 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. Reports indicate that active exploitation against the vulnerability in Microsoft Windows and Windows Server for privilege escalation have been observed.

]]> Security Alert (A19-12-02): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=438 https://www.govcert.gov.hk/en/alerts_detail.php?id=438 Mon, 09 Dec 2019 12:00:00 +0800 VMware has published a security advisory to address a remote code execution vulnerability in OpenSLP that was used in VMware ESXi and Horizon Desktop-as-a-service (DaaS) appliance.

]]> Security Alert (A19-12-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=437 https://www.govcert.gov.hk/en/alerts_detail.php?id=437 Wed, 04 Dec 2019 12:00:00 +0800 Mozilla has published two security advisories (MFSA 2019-36 and MFSA 2019-37) to address multiple browser vulnerabilities.

]]> High Threat Security Alert (A19-11-04): Vulnerability in Apache Solr Search Platform https://www.govcert.gov.hk/en/alerts_detail.php?id=436 https://www.govcert.gov.hk/en/alerts_detail.php?id=436 Tue, 26 Nov 2019 12:00:00 +0800 The Apache Software Foundation has released a security advisory to address an insecure setting issue in Apache Solr 8.1.1 and 8.2.0 for Linux.

]]> Security Alert (A19-11-03): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=435 https://www.govcert.gov.hk/en/alerts_detail.php?id=435 Thu, 21 Nov 2019 12:00:00 +0800 A vulnerability in the ISC BIND software could make it fail to effectively limit the number of concurrent TCP clients for avoiding resource overloading.

]]> High Threat Security Alert (A19-11-02): Multiple Vulnerabilities in Microsoft Products (November 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=434 https://www.govcert.gov.hk/en/alerts_detail.php?id=434 Wed, 13 Nov 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. Reports indicate that active exploitation against the vulnerability in Microsoft Internet Explorer for remote code execution have been observed.

]]> High Threat Security Alert (A19-11-01): Multiple Vulnerabilities in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=433 https://www.govcert.gov.hk/en/alerts_detail.php?id=433 Fri, 01 Nov 2019 12:00:00 +0800 Google released a security update to address use-after-free vulnerabilities in the PDFium and audio components of the Google Chrome.

]]> Security Alert (A19-10-09): Multiple Vulnerabilities in Apple iOS and iPadOS https://www.govcert.gov.hk/en/alerts_detail.php?id=432 https://www.govcert.gov.hk/en/alerts_detail.php?id=432 Wed, 30 Oct 2019 12:00:00 +0800 Apple has released iOS 13.2 and iPadOS 13.2 to fix multiple security vulnerabilities in various Apple devices.

]]> High Threat Security Alert (A19-10-08): Vulnerability in NGINX with PHP Installation https://www.govcert.gov.hk/en/alerts_detail.php?id=431 https://www.govcert.gov.hk/en/alerts_detail.php?id=431 Mon, 28 Oct 2019 12:00:00 +0800 A vulnerability has been found in the PHP FastCGI Process Manager (PHP-FPM) for NGINX HTTP servers.

]]> Security Alert (A19-10-07): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=430 https://www.govcert.gov.hk/en/alerts_detail.php?id=430 Wed, 23 Oct 2019 12:00:00 +0800 Mozilla has published two security advisories to address multiple browser vulnerabilities.

]]> Security Alert (A19-10-06): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=429 https://www.govcert.gov.hk/en/alerts_detail.php?id=429 Fri, 18 Oct 2019 12:00:00 +0800 Multiple vulnerabilities were found in ISC BIND software.

]]> Security Alert (A19-10-05): Multiple Vulnerabilities in Cisco Aironet Access Points https://www.govcert.gov.hk/en/alerts_detail.php?id=428 https://www.govcert.gov.hk/en/alerts_detail.php?id=428 Thu, 17 Oct 2019 12:00:00 +0800 Cisco released security advisories to address the vulnerabilities in Cisco Aironet Access Points (APs).

]]> Security Alert (A19-10-04): Multiple Vulnerabilities in Oracle Java and Oracle Products (October 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=427 https://www.govcert.gov.hk/en/alerts_detail.php?id=427 Wed, 16 Oct 2019 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A19-10-03): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=426 https://www.govcert.gov.hk/en/alerts_detail.php?id=426 Wed, 16 Oct 2019 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A19-10-02): Vulnerability in Sudo https://www.govcert.gov.hk/en/alerts_detail.php?id=425 https://www.govcert.gov.hk/en/alerts_detail.php?id=425 Tue, 15 Oct 2019 12:00:00 +0800 A privilege escalation vulnerability was identified in Sudo package.

]]> Security Alert (A19-10-01): Multiple Vulnerabilities in Microsoft Products (October 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=424 https://www.govcert.gov.hk/en/alerts_detail.php?id=424 Wed, 09 Oct 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities and which affect several Microsoft products or components.

]]> Security Alert (A19-09-07): Multiple Vulnerabilities in Apple devices https://www.govcert.gov.hk/en/alerts_detail.php?id=423 https://www.govcert.gov.hk/en/alerts_detail.php?id=423 Fri, 27 Sep 2019 12:00:00 +0800 Apple has released iOS 12.4.2, iOS 13.1 and iPadOS 13.1 to fix multiple security vulnerabilities in various Apple devices.

]]> Security Alert (A19-09-06): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=422 https://www.govcert.gov.hk/en/alerts_detail.php?id=422 Thu, 26 Sep 2019 12:00:00 +0800 Cisco released security advisories to address the vulnerabilities in Cisco IOS, IOS XE, IOS XR and NX-OS software.

]]> High Threat Security Alert (A19-09-05): Multiple Vulnerabilities in Microsoft Internet Explorer and Defender https://www.govcert.gov.hk/en/alerts_detail.php?id=421 https://www.govcert.gov.hk/en/alerts_detail.php?id=421 Tue, 24 Sep 2019 12:00:00 +0800 Microsoft has released out-of-band security updates addressing the vulnerabilities found in the Internet Explorer and Microsoft Defender. Reports indicate that active exploitation against the vulnerability in Microsoft Internet Explorer for remote code execution has been observed.

]]> Security Alert (A19-09-04): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=420 https://www.govcert.gov.hk/en/alerts_detail.php?id=420 Wed, 11 Sep 2019 12:00:00 +0800 Security updates are released for Adobe Flash Player to address the vulnerabilities.

]]> High Threat Security Alert (A19-09-03): Multiple Vulnerabilities in Microsoft Products (September 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=419 https://www.govcert.gov.hk/en/alerts_detail.php?id=419 Wed, 11 Sep 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities and which affect several Microsoft products or components.

]]> Security Alert (A19-09-02): Multiple Vulnerabilities in PHP https://www.govcert.gov.hk/en/alerts_detail.php?id=418 https://www.govcert.gov.hk/en/alerts_detail.php?id=418 Fri, 06 Sep 2019 12:00:00 +0800 Multiple vulnerabilities have been found in PHP.

]]> Security Alert (A19-09-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=417 https://www.govcert.gov.hk/en/alerts_detail.php?id=417 Wed, 04 Sep 2019 12:00:00 +0800 Mozilla has published three security advisories (MFSA 2019-25, MFSA 2019-26 and MFSA 2019-27) to address multiple browser vulnerabilities.

]]> Security Alert (A19-08-07): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=416 https://www.govcert.gov.hk/en/alerts_detail.php?id=416 Fri, 30 Aug 2019 12:00:00 +0800 Cisco released security advisories to address the vulnerabilities in Cisco IOS XE, NX-OS and FXOS software.

]]> Security Alert (A19-08-06): Vulnerability in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=415 https://www.govcert.gov.hk/en/alerts_detail.php?id=415 Tue, 27 Aug 2019 12:00:00 +0800 Apple has released a security update in its latest iOS version 12.4.1 to fix a vulnerability identified in various iOS devices.

]]> High Threat Security Alert (A19-08-05): Multiple Vulnerabilities in Fortinet and Pulse Secure Products https://www.govcert.gov.hk/en/alerts_detail.php?id=414 https://www.govcert.gov.hk/en/alerts_detail.php?id=414 Tue, 27 Aug 2019 12:00:00 +0800 Fortinet and Pulse Secure released security advisories to address the vulnerabilities in their SSL VPN services.

]]> Security Alert (A19-08-04): Vulnerability in Squid https://www.govcert.gov.hk/en/alerts_detail.php?id=413 https://www.govcert.gov.hk/en/alerts_detail.php?id=413 Tue, 27 Aug 2019 12:00:00 +0800 Squid has published a security advisory (SQUID-2019:5) to address a buffer overflow vulnerability.

]]> Security Alert (A19-08-03): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=412 https://www.govcert.gov.hk/en/alerts_detail.php?id=412 Thu, 15 Aug 2019 12:00:00 +0800 Mozilla has published a security advisory (MFSA 2019-24) to address a browser vulnerability.

]]> Security Alert (A19-08-02): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=411 https://www.govcert.gov.hk/en/alerts_detail.php?id=411 Wed, 14 Aug 2019 12:00:00 +0800 Security updates are released for Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A19-08-01): Multiple Vulnerabilities in Microsoft Products (August 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=410 https://www.govcert.gov.hk/en/alerts_detail.php?id=410 Wed, 14 Aug 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A19-07-05): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=409 https://www.govcert.gov.hk/en/alerts_detail.php?id=409 Tue, 23 Jul 2019 12:00:00 +0800 Apple has released a security update in its latest iOS version 12.4 to fix 36 vulnerabilities identified in various iOS devices.

]]> Security Alert (A19-07-04): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=408 https://www.govcert.gov.hk/en/alerts_detail.php?id=408 Thu, 18 Jul 2019 12:00:00 +0800 Drupal released security update to fix the vulnerability in the Workspaces module which are included in the Drupal core.

]]> Security Alert (A19-07-03): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=407 https://www.govcert.gov.hk/en/alerts_detail.php?id=407 Wed, 17 Jul 2019 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> High Threat Security Alert (A19-07-02): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=406 https://www.govcert.gov.hk/en/alerts_detail.php?id=406 Wed, 10 Jul 2019 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. Reports indicate that the vulnerabilities allow an attacker to run arbitrary code.

]]> High Threat Security Alert (A19-07-01): Multiple Vulnerabilities in Microsoft Products (July 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=405 https://www.govcert.gov.hk/en/alerts_detail.php?id=405 Wed, 10 Jul 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities and which affect several Microsoft products or components.

]]> Security Alert (A19-06-09): Vulnerability in Dell SupportAssist https://www.govcert.gov.hk/en/alerts_detail.php?id=404 https://www.govcert.gov.hk/en/alerts_detail.php?id=404 Mon, 24 Jun 2019 12:00:00 +0800 Dell released a security update to address a vulnerability in the PC Doctor component of the Dell SupportAssist software.

]]> Security Alert (A19-06-08): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=403 https://www.govcert.gov.hk/en/alerts_detail.php?id=403 Fri, 21 Jun 2019 12:00:00 +0800 Apache Software Foundation has released new versions of Apache Tomcat 8 and 9 to address a vulnerability in HTTP/2.

]]> Security Alert (A19-06-07): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=402 https://www.govcert.gov.hk/en/alerts_detail.php?id=402 Fri, 21 Jun 2019 12:00:00 +0800 A vulnerability was found in the ISC BIND software.

]]> High Threat Security Alert (A19-06-06): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=401 https://www.govcert.gov.hk/en/alerts_detail.php?id=401 Fri, 21 Jun 2019 12:00:00 +0800 Mozilla has published a security advisory to address the vulnerability found in Firefox.

]]> High Threat Security Alert (A19-06-05): Vulnerability in Oracle WebLogic Server https://www.govcert.gov.hk/en/alerts_detail.php?id=400 https://www.govcert.gov.hk/en/alerts_detail.php?id=400 Wed, 19 Jun 2019 12:00:00 +0800 Oracle has released an urgent patch to address a remote code execution vulnerability in Oracle WebLogic Server.

]]> High Threat Security Alert (A19-06-04): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=399 https://www.govcert.gov.hk/en/alerts_detail.php?id=399 Wed, 19 Jun 2019 12:00:00 +0800 Mozilla has published a security advisory to address the vulnerability found in Firefox.

]]> Security Alert (A19-06-03): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=398 https://www.govcert.gov.hk/en/alerts_detail.php?id=398 Wed, 12 Jun 2019 12:00:00 +0800 Mozilla has published a security advisory to address the vulnerability found in Firefox.

]]> Security Alert (A19-06-02): Vulnerability in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=397 https://www.govcert.gov.hk/en/alerts_detail.php?id=397 Wed, 12 Jun 2019 12:00:00 +0800 Security updates are released for Adobe Flash Player to address the vulnerability.

]]> Security Alert (A19-06-01): Multiple Vulnerabilities in Microsoft Products (June 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=396 https://www.govcert.gov.hk/en/alerts_detail.php?id=396 Wed, 12 Jun 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A19-05-11): Multiple Vulnerabilities in Intel Products https://www.govcert.gov.hk/en/alerts_detail.php?id=395 https://www.govcert.gov.hk/en/alerts_detail.php?id=395 Mon, 27 May 2019 12:00:00 +0800 Intel has issued a security advisory to address multiple vulnerabilities in some Intel products.

]]> Security Alert (A19-05-10): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=394 https://www.govcert.gov.hk/en/alerts_detail.php?id=394 Wed, 22 May 2019 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A19-05-09): Multiple Vulnerabilities in Intel Products https://www.govcert.gov.hk/en/alerts_detail.php?id=393 https://www.govcert.gov.hk/en/alerts_detail.php?id=393 Thu, 16 May 2019 12:00:00 +0800 Intel has recently disclosed a new group of vulnerabilities collectively known as Microarchitectural Data Sampling (MDS) affecting some Intel processors.

]]> Security Alert (A19-05-08): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=392 https://www.govcert.gov.hk/en/alerts_detail.php?id=392 Wed, 15 May 2019 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A19-05-07): Multiple Vulnerabilities in Microsoft Products (May 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=391 https://www.govcert.gov.hk/en/alerts_detail.php?id=391 Wed, 15 May 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A19-05-06): Vulnerability in WhatsApp leading to spyware attacks on mobile devices https://www.govcert.gov.hk/en/alerts_detail.php?id=390 https://www.govcert.gov.hk/en/alerts_detail.php?id=390 Tue, 14 May 2019 12:00:00 +0800 A security vulnerability has been identified in WhatsApp which would allow a remote attacker to install malicious code such as spyware, on a targeted mobile device by making a WhatsApp call.

]]> Security Alert (A19-05-05): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=389 https://www.govcert.gov.hk/en/alerts_detail.php?id=389 Tue, 14 May 2019 12:00:00 +0800 Apple has released a security update in its latest iOS version 12.3 to fix 40 vulnerabilities identified in various iOS devices.

]]> Security Alert (A19-05-04): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=388 https://www.govcert.gov.hk/en/alerts_detail.php?id=388 Tue, 14 May 2019 12:00:00 +0800 Cisco released security advisories to address the vulnerabilities in Cisco IOS XE software and the implementation of the hardware-based Secure Boot.

]]> Security Alert (A19-05-03): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=387 https://www.govcert.gov.hk/en/alerts_detail.php?id=387 Thu, 09 May 2019 12:00:00 +0800 Drupal released security update to fix the vulnerability in Phar Stream Wrapper package which are included in the Drupal core.

]]> High Threat Security Alert (A19-05-02): Multiple Vulnerabilities in Dell SupportAssist Client https://www.govcert.gov.hk/en/alerts_detail.php?id=386 https://www.govcert.gov.hk/en/alerts_detail.php?id=386 Thu, 02 May 2019 12:00:00 +0800 Dell released a security update to address multiple vulnerabilities in Dell SupportAssist Client installed on some Dell devices. The researcher who discovered the remote code execution vulnerability has recently released the proof-of-concept but fully workable exploit code on the Internet.

]]> Security Alert (A19-05-01): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=385 https://www.govcert.gov.hk/en/alerts_detail.php?id=385 Thu, 02 May 2019 12:00:00 +0800 Cisco released security advisories to address the vulnerabilities in Cisco ASA software and Cisco FTD software.

]]> Security Alert (A19-04-08): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=384 https://www.govcert.gov.hk/en/alerts_detail.php?id=384 Thu, 25 Apr 2019 12:00:00 +0800 Multiple vulnerabilities were found in nxdomain-redirect feature and simultaneous TCP connections limit of the ISC BIND software.

]]> High Threat Security Alert (A19-04-07): Vulnerability in Oracle WebLogic Server https://www.govcert.gov.hk/en/alerts_detail.php?id=383 https://www.govcert.gov.hk/en/alerts_detail.php?id=383 Tue, 23 Apr 2019 12:00:00 +0800 Security researchers discovered a remote code execution vulnerability in wls9_async and wls-wsat components, which are included in the Oracle WebLogic Server. Reports indicated that proof-of-concept code is publicly available. Users are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

]]> Security Alert (A19-04-06): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=382 https://www.govcert.gov.hk/en/alerts_detail.php?id=382 Thu, 18 Apr 2019 12:00:00 +0800 Drupal released security updates to fix the vulnerabilities in jQuery and Symfony libraries which are included in the Drupal core.

]]> Security Alert (A19-04-05): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=381 https://www.govcert.gov.hk/en/alerts_detail.php?id=381 Wed, 17 Apr 2019 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A19-04-04): Vulnerability in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=380 https://www.govcert.gov.hk/en/alerts_detail.php?id=380 Mon, 15 Apr 2019 12:00:00 +0800 Apache Software Foundation has released new versions of Apache Tomcat 7, 8 and 9 to address a vulnerability in CGI servlet.

]]> Security Alert (A19-04-03): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=379 https://www.govcert.gov.hk/en/alerts_detail.php?id=379 Wed, 10 Apr 2019 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A19-04-02): Multiple Vulnerabilities in Microsoft Products (April 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=378 https://www.govcert.gov.hk/en/alerts_detail.php?id=378 Wed, 10 Apr 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities and which affect several Microsoft products or components. Reports indicate active exploitation against the vulnerabilities in Microsoft Windows have been observed.

]]> High Threat Security Alert (A19-04-01): Multiple Vulnerabilities in Apache HTTP Server https://www.govcert.gov.hk/en/alerts_detail.php?id=377 https://www.govcert.gov.hk/en/alerts_detail.php?id=377 Wed, 03 Apr 2019 12:00:00 +0800 The Apache Software Foundation released a security update to address multiple vulnerabilities in the modules of HTTP Server.

]]> Security Alert (A19-03-08): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=376 https://www.govcert.gov.hk/en/alerts_detail.php?id=376 Fri, 29 Mar 2019 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities in virtual USB 1.1 UHCI (Universal Host Controller Interface), virtual network adapters and VMware Tools.

]]> Security Alert (A19-03-07): Multiple Vulnerabilities in Cisco Products (March 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=375 https://www.govcert.gov.hk/en/alerts_detail.php?id=375 Thu, 28 Mar 2019 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco IOS and IOS XE software.

]]> Security Alert (A19-03-06): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=374 https://www.govcert.gov.hk/en/alerts_detail.php?id=374 Tue, 26 Mar 2019 12:00:00 +0800 Apple has released a security update in its latest iOS version 12.2 to fix 50 vulnerabilities identified in various iOS devices.

]]> Security Alert (A19-03-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=373 https://www.govcert.gov.hk/en/alerts_detail.php?id=373 Mon, 25 Mar 2019 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A19-03-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=372 https://www.govcert.gov.hk/en/alerts_detail.php?id=372 Wed, 20 Mar 2019 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> High Threat Security Alert (A19-03-03): Multiple Vulnerabilities in Microsoft Products (March 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=371 https://www.govcert.gov.hk/en/alerts_detail.php?id=371 Wed, 13 Mar 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A19-03-02): Vulnerability in Google Chrome https://www.govcert.gov.hk/en/alerts_detail.php?id=370 https://www.govcert.gov.hk/en/alerts_detail.php?id=370 Thu, 07 Mar 2019 12:00:00 +0800 Google released a security update to address a use-after-free vulnerability in the FileReader application programming interface (API) of the Google Chrome.

]]> High Threat Security Alert (A19-03-01): Vulnerability in Adobe ColdFusion https://www.govcert.gov.hk/en/alerts_detail.php?id=369 https://www.govcert.gov.hk/en/alerts_detail.php?id=369 Mon, 04 Mar 2019 12:00:00 +0800 Adobe released a security update to address a “File Upload Restriction Bypass” vulnerability in ColdFusion.

]]> Security Alert (A19-02-08): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=368 https://www.govcert.gov.hk/en/alerts_detail.php?id=368 Mon, 25 Feb 2019 12:00:00 +0800 Multiple vulnerabilities were found in "EDNS", "managed-keys" and "Dynamically Loadable Zones" features of the ISC BIND software.

]]> Security Alert (A19-02-07): Vulnerability in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=367 https://www.govcert.gov.hk/en/alerts_detail.php?id=367 Fri, 22 Feb 2019 12:00:00 +0800 A security update is released for Adobe Reader and Acrobat to address a vulnerability.

]]> High Threat Security Alert (A19-02-06): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=366 https://www.govcert.gov.hk/en/alerts_detail.php?id=366 Thu, 21 Feb 2019 12:00:00 +0800 Drupal released security updates to fix the vulnerability resided in the Drupal Core and its modules. Report indicates that active exploitation against the vulnerability has been observed.

]]> Security Alert (A19-02-05): Vulnerability in Linux Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=365 https://www.govcert.gov.hk/en/alerts_detail.php?id=365 Thu, 14 Feb 2019 12:00:00 +0800 A vulnerability was found in the software deployment and package management system called snapd which is used by several Linux distributions.

]]> Security Alert (A19-02-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=364 https://www.govcert.gov.hk/en/alerts_detail.php?id=364 Wed, 13 Feb 2019 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A19-02-03): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=363 https://www.govcert.gov.hk/en/alerts_detail.php?id=363 Wed, 13 Feb 2019 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A19-02-02): Multiple Vulnerabilities in Microsoft Products (February 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=362 https://www.govcert.gov.hk/en/alerts_detail.php?id=362 Wed, 13 Feb 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. Reports indicate active exploitation against the vulnerability in Microsoft Internet Explorer has been observed.

]]> High Threat Security Alert (A19-02-01): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=361 https://www.govcert.gov.hk/en/alerts_detail.php?id=361 Fri, 08 Feb 2019 12:00:00 +0800 Apple has released a security update in its latest iOS version 12.1.4 to fix 4 vulnerabilities identified in various iOS devices. Report indicates that active exploitation against the vulnerabilities in Apple iOS have been observed.

]]> Security Alert (A19-01-07): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=360 https://www.govcert.gov.hk/en/alerts_detail.php?id=360 Wed, 30 Jan 2019 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A19-01-05): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=358 https://www.govcert.gov.hk/en/alerts_detail.php?id=358 Thu, 17 Jan 2019 12:00:00 +0800 Drupal released security updates to fix the vulnerabilities resided in the Drupal Core and the PEAR Archive_tar library.

]]> Security Alert (A19-01-04): Multiple Vulnerabilities in Oracle Java and Oracle Products (January 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=357 https://www.govcert.gov.hk/en/alerts_detail.php?id=357 Wed, 16 Jan 2019 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A19-01-03): Multiple Vulnerabilities in Cisco Email Security Appliances https://www.govcert.gov.hk/en/alerts_detail.php?id=356 https://www.govcert.gov.hk/en/alerts_detail.php?id=356 Thu, 10 Jan 2019 12:00:00 +0800 Cisco released security advisories to address multiple vulnerabilities in Cisco AsyncOS Software for Cisco Email Security Appliances (ESA).

]]> Security Alert (A19-01-02): Multiple Vulnerabilities in Microsoft Products (January 2019) https://www.govcert.gov.hk/en/alerts_detail.php?id=355 https://www.govcert.gov.hk/en/alerts_detail.php?id=355 Wed, 09 Jan 2019 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A19-01-01): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=354 https://www.govcert.gov.hk/en/alerts_detail.php?id=354 Fri, 04 Jan 2019 12:00:00 +0800 Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.

]]> Security Alert (A18-12-09): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=353 https://www.govcert.gov.hk/en/alerts_detail.php?id=353 Thu, 20 Dec 2018 12:00:00 +0800 Cisco has released the security advisory to address a vulnerability in Cisco Adaptive Security Appliance (ASA) software with web management interface enabled.

]]> High Threat Security Alert (A18-12-08): Vulnerability in Microsoft Products https://www.govcert.gov.hk/en/alerts_detail.php?id=352 https://www.govcert.gov.hk/en/alerts_detail.php?id=352 Thu, 20 Dec 2018 12:00:00 +0800 Microsoft has released a security advisory addressing the scripting engine memory corruption vulnerability in Microsoft Internet Explorer.

]]> Security Alert (A18-12-07): Vulnerability in IBM Notes and Domino https://www.govcert.gov.hk/en/alerts_detail.php?id=351 https://www.govcert.gov.hk/en/alerts_detail.php?id=351 Mon, 17 Dec 2018 12:00:00 +0800 A vulnerability is found in the Notes System Diagnostic (NSD) service of the IBM Notes and Domino Windows versions.

]]> Security Alert (A18-12-06): Multiple Vulnerabilities in phpMyAdmin https://www.govcert.gov.hk/en/alerts_detail.php?id=350 https://www.govcert.gov.hk/en/alerts_detail.php?id=350 Wed, 12 Dec 2018 12:00:00 +0800 Security updates were released to address three vulnerabilities in phpMyAdmin.

]]> Security Alert (A18-12-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=349 https://www.govcert.gov.hk/en/alerts_detail.php?id=349 Wed, 12 Dec 2018 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A18-12-04): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=348 https://www.govcert.gov.hk/en/alerts_detail.php?id=348 Wed, 12 Dec 2018 12:00:00 +0800 Security updates are released for Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A18-12-03): Multiple Vulnerabilities in Microsoft Products (December 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=347 https://www.govcert.gov.hk/en/alerts_detail.php?id=347 Wed, 12 Dec 2018 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. Reports indicate active exploitation against vulnerability in Windows kernel has been observed.

]]> Security Alert (A18-12-02): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=346 https://www.govcert.gov.hk/en/alerts_detail.php?id=346 Thu, 06 Dec 2018 12:00:00 +0800 Apple has released a security update in its latest iOS version 12.1.1 to fix 20 vulnerabilities identified in various iOS devices.

]]> High Threat Security Alert (A18-12-01): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=345 https://www.govcert.gov.hk/en/alerts_detail.php?id=345 Thu, 06 Dec 2018 12:00:00 +0800 Adobe released a security update to address some vulnerabilities found in the Adobe Flash Player. Reports indicate that one of the vulnerabilities is being exploited in the wild.

]]> Security Alert (A18-11-08): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=344 https://www.govcert.gov.hk/en/alerts_detail.php?id=344 Fri, 23 Nov 2018 12:00:00 +0800 VMware has published a security advisory to address an integer overflow vulnerability in the virtual network devices.

]]> Security Alert (A18-11-07): Vulnerability in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=343 https://www.govcert.gov.hk/en/alerts_detail.php?id=343 Wed, 21 Nov 2018 12:00:00 +0800 Adobe released a security update to address a vulnerability found in the Adobe Flash Player.

]]> Security Alert (A18-11-06): Multiple Vulnerabilities in IBM Notes and Domino https://www.govcert.gov.hk/en/alerts_detail.php?id=342 https://www.govcert.gov.hk/en/alerts_detail.php?id=342 Fri, 16 Nov 2018 12:00:00 +0800 Multiple vulnerabilities are found in IBM Notes and Domino. The bundled Java virtual machine (JVM) is susceptible to different attacks.

]]> Security Alert (A18-11-05): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=341 https://www.govcert.gov.hk/en/alerts_detail.php?id=341 Wed, 14 Nov 2018 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A18-11-04): Multiple Vulnerabilities in Microsoft Products (November 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=340 https://www.govcert.gov.hk/en/alerts_detail.php?id=340 Wed, 14 Nov 2018 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A18-11-03): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=339 https://www.govcert.gov.hk/en/alerts_detail.php?id=339 Mon, 12 Nov 2018 12:00:00 +0800 VMware has published a security advisory to address an uninitialised stack memory vulnerability in the vmxnet3 virtual network adapter.

]]> Security Alert (A18-11-02): Vulnerabilities in Solid State Drives (SSDs) with Hardware Encryption https://www.govcert.gov.hk/en/alerts_detail.php?id=338 https://www.govcert.gov.hk/en/alerts_detail.php?id=338 Fri, 09 Nov 2018 12:00:00 +0800 A local attacker could disclose the encrypted information on the vulnerable Solid State Drives (SSD) by altering the firmware through the debugging interface.

]]> Security Alert (A18-11-01): Vulnerability in Commons FileUpload Library for Apache Struts and Other Java-based systems https://www.govcert.gov.hk/en/alerts_detail.php?id=337 https://www.govcert.gov.hk/en/alerts_detail.php?id=337 Wed, 07 Nov 2018 12:00:00 +0800 A vulnerability in the Apache Commons FileUpload library discovered in 2016 affects Apache Struts systems.

]]> Security Alert (A18-10-09): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=336 https://www.govcert.gov.hk/en/alerts_detail.php?id=336 Wed, 31 Oct 2018 12:00:00 +0800 Apple has released security updates in its latest iOS version 12.1 to fix 31 vulnerabilities identified in various iOS devices.

]]> Security Alert (A18-10-08): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=335 https://www.govcert.gov.hk/en/alerts_detail.php?id=335 Wed, 24 Oct 2018 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A18-10-07): Multiple Vulnerabilities in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=334 https://www.govcert.gov.hk/en/alerts_detail.php?id=334 Fri, 19 Oct 2018 12:00:00 +0800 Drupal released security updates to fix several vulnerabilities resided in the Drupal Core.

]]> Security Alert (A18-10-06): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=333 https://www.govcert.gov.hk/en/alerts_detail.php?id=333 Thu, 18 Oct 2018 12:00:00 +0800 VMware has published a security advisory to address a vulnerability in VMware vSphere ESXi (ESXi), VMware Workstation and VMWare Fusion.

]]> Security Alert (A18-10-05): Multiple Vulnerabilities in Oracle Java and Oracle Products (October 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=332 https://www.govcert.gov.hk/en/alerts_detail.php?id=332 Thu, 18 Oct 2018 12:00:00 +0800 Oracle has released Critical Patch Update Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> High Threat Security Alert (A18-10-04): Multiple Vulnerabilities in Microsoft Products (October 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=331 https://www.govcert.gov.hk/en/alerts_detail.php?id=331 Wed, 10 Oct 2018 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. Reports indicate that proof-of-concept and fully workable exploit codes targeting the vulnerabilities have been publicly disclosed.

]]> Security Alert (A18-10-03): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=330 https://www.govcert.gov.hk/en/alerts_detail.php?id=330 Thu, 04 Oct 2018 12:00:00 +0800 Cisco released security advisories to address the vulnerabilities in Adaptive Security Appliance (ASA) software and Firepower Threat Defense (FTD) software.

]]> Security Alert (A18-10-02): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=329 https://www.govcert.gov.hk/en/alerts_detail.php?id=329 Wed, 03 Oct 2018 12:00:00 +0800 Mozilla has published a security advisory to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A18-10-01): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=328 https://www.govcert.gov.hk/en/alerts_detail.php?id=328 Tue, 02 Oct 2018 12:00:00 +0800 Security updates are released for Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> Security Alert (A18-09-08): Vulnerability in Linux Kernel https://www.govcert.gov.hk/en/alerts_detail.php?id=327 https://www.govcert.gov.hk/en/alerts_detail.php?id=327 Fri, 28 Sep 2018 12:00:00 +0800 An Integer overflow vulnerability was found in several Linux distributions.

]]> Security Alert (A18-09-07): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=326 https://www.govcert.gov.hk/en/alerts_detail.php?id=326 Fri, 28 Sep 2018 12:00:00 +0800 Cisco has released 21 security advisories fixing a number of vulnerabilities in Cisco IOS and IOS XE software.

]]> Security Alert (A18-09-06): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=325 https://www.govcert.gov.hk/en/alerts_detail.php?id=325 Thu, 20 Sep 2018 12:00:00 +0800 Security updates are released for Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> Security Alert (A18-09-05): Multiple Vulnerabilities in PHP https://www.govcert.gov.hk/en/alerts_detail.php?id=324 https://www.govcert.gov.hk/en/alerts_detail.php?id=324 Tue, 18 Sep 2018 12:00:00 +0800 Multiple vulnerabilities have been found in PHP. A remote attacker could exploit the vulnerabilities via specially crafted requests.

]]> Security Alert (A18-09-04): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=323 https://www.govcert.gov.hk/en/alerts_detail.php?id=323 Tue, 18 Sep 2018 12:00:00 +0800 Apple has released security updates in its latest iOS version 12 to fix 15 vulnerabilities identified in various iOS devices.

]]> Security Alert (A18-09-03): Vulnerability in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=322 https://www.govcert.gov.hk/en/alerts_detail.php?id=322 Wed, 12 Sep 2018 12:00:00 +0800 Adobe released a security update to address a vulnerability found in the Adobe Flash Player.

]]> High Threat Security Alert (A18-09-02): Multiple Vulnerabilities in Microsoft Products (September 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=321 https://www.govcert.gov.hk/en/alerts_detail.php?id=321 Wed, 12 Sep 2018 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. Reports indicate that exploitation of a zero-day vulnerability was detected against Windows systems.

]]> Security Alert (A18-09-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=320 https://www.govcert.gov.hk/en/alerts_detail.php?id=320 Thu, 06 Sep 2018 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> High Threat Security Alert (A18-08-08): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=319 https://www.govcert.gov.hk/en/alerts_detail.php?id=319 Thu, 23 Aug 2018 12:00:00 +0800 Apache has released a new version of Apache Struts to address a vulnerability caused by misconfiguration in namespace. A remote attacker could exploit the vulnerability by sending a specially crafted request to the affected systems.

]]> Security Alert (A18-08-07): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=318 https://www.govcert.gov.hk/en/alerts_detail.php?id=318 Mon, 20 Aug 2018 12:00:00 +0800 Apache Software Foundation has released new versions of Apache Tomcat Native to address multiple vulnerabilities.

]]> Security Alert (A18-08-06): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=317 https://www.govcert.gov.hk/en/alerts_detail.php?id=317 Wed, 15 Aug 2018 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> High Threat Security Alert (A18-08-05): Multiple Vulnerabilities in Microsoft Products (August 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=316 https://www.govcert.gov.hk/en/alerts_detail.php?id=316 Wed, 15 Aug 2018 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. Reports indicate that exploitation of two zero-day vulnerabilities were detected against Internet Explorer and Windows systems.

]]> Security Alert (A18-08-04): Vulnerability in Oracle Database https://www.govcert.gov.hk/en/alerts_detail.php?id=315 https://www.govcert.gov.hk/en/alerts_detail.php?id=315 Tue, 14 Aug 2018 12:00:00 +0800 Oracle has released an advisory to address a vulnerability in Java VM component of Oracle Databases Server.

]]> Security Alert (A18-08-03): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=314 https://www.govcert.gov.hk/en/alerts_detail.php?id=314 Thu, 09 Aug 2018 12:00:00 +0800 A vulnerability was found in "deny-answer-aliases" feature of the ISC BIND software.

]]> Security Alert (A18-08-02): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=313 https://www.govcert.gov.hk/en/alerts_detail.php?id=313 Wed, 08 Aug 2018 12:00:00 +0800 Drupal released a security update to fix a vulnerability in Drupal.

]]> Security Alert (A18-08-01): Vulnerability in Linux Kernel https://www.govcert.gov.hk/en/alerts_detail.php?id=312 https://www.govcert.gov.hk/en/alerts_detail.php?id=312 Wed, 08 Aug 2018 12:00:00 +0800 A vulnerability was found in the Linux kernel of the affected operating systems.

]]> Security Alert (A18-07-07): Multiple Vulnerabilities in Apache Tomcat https://www.govcert.gov.hk/en/alerts_detail.php?id=311 https://www.govcert.gov.hk/en/alerts_detail.php?id=311 Wed, 25 Jul 2018 12:00:00 +0800 Apache Software Foundation has released new versions of Apache Tomcat to address multiple vulnerabilities which are caused by UTF-8 decoder flaw and tracking of connection closures.

]]> High Threat Security Alert (A18-07-06): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2018) (Updated) https://www.govcert.gov.hk/en/alerts_detail.php?id=310 https://www.govcert.gov.hk/en/alerts_detail.php?id=310 Wed, 18 Jul 2018 12:00:00 +0800 As proof-of-concept exploit code against CVE-2018-2893 were reported to be publicly disclosed, the risk of cyber attacks on the vulnerable Oracle WebLogic Server will be elevated.

]]> Security Alert (A18-07-05): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=309 https://www.govcert.gov.hk/en/alerts_detail.php?id=309 Wed, 11 Jul 2018 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> Security Alert (A18-07-04): Multiple Vulnerabilities in Microsoft Products (July 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=308 https://www.govcert.gov.hk/en/alerts_detail.php?id=308 Wed, 11 Jul 2018 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A18-07-03): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=307 https://www.govcert.gov.hk/en/alerts_detail.php?id=307 Tue, 10 Jul 2018 12:00:00 +0800 Apple has released security updates in its latest iOS version 11.4.1 to fix 22 vulnerabilities identified in various iOS devices.

]]> Security Alert (A18-07-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=306 https://www.govcert.gov.hk/en/alerts_detail.php?id=306 Thu, 05 Jul 2018 12:00:00 +0800 Google has released security patch levels of 2018-07-01 and 2018-07-05 to fix 44 vulnerabilities identified in various Android devices.

]]> Security Alert (A18-07-01): Multiple Vulnerabilities in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=305 https://www.govcert.gov.hk/en/alerts_detail.php?id=305 Tue, 03 Jul 2018 12:00:00 +0800 VMware has published a security advisory to address vulnerabilities found in VMware vSphere ESXi, VMware Workstation and VMWare Fusion.

]]> High Threat Security Alert (A18-06-10): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=304 https://www.govcert.gov.hk/en/alerts_detail.php?id=304 Fri, 29 Jun 2018 12:00:00 +0800 Cisco released a security advisory to address the vulnerability in the web interface of the Cisco ASA. Researchers report that exploitations of the vulnerability are observed.

]]> Security Alert (A18-06-09): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=303 https://www.govcert.gov.hk/en/alerts_detail.php?id=303 Wed, 27 Jun 2018 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A18-06-08): Multiple Vulnerabilities in Cisco Products (June 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=302 https://www.govcert.gov.hk/en/alerts_detail.php?id=302 Thu, 21 Jun 2018 12:00:00 +0800 Cisco has released 24 security advisories fixing a number of vulnerabilities in Cisco FXOS and NX-OS software.

]]> Security Alert (A18-06-07): Multiple Vulnerabilities in Microsoft Products (June 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=301 https://www.govcert.gov.hk/en/alerts_detail.php?id=301 Wed, 13 Jun 2018 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components and enhancing the security as a defense in depth measure.

]]> Security Alert (A18-06-06): Multiple Vulnerabilities in Synology Drive https://www.govcert.gov.hk/en/alerts_detail.php?id=300 https://www.govcert.gov.hk/en/alerts_detail.php?id=300 Fri, 08 Jun 2018 12:00:00 +0800 Multiple vulnerabilities were found in the Synology Drive, which is a file management solution to unify multiple file portals on Synology Network Attached Storage (NAS) by synchronizing files across various desktop and mobile platforms.

]]> High Threat Security Alert (A18-06-05): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=299 https://www.govcert.gov.hk/en/alerts_detail.php?id=299 Fri, 08 Jun 2018 12:00:00 +0800 Adobe and Microsoft have published security advisories about vulnerabilities found in the Adobe Flash Player. Reports indicate that one of the vulnerabilities is being exploited in the wild against Windows users.

]]> Security Alert (A18-06-04): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=298 https://www.govcert.gov.hk/en/alerts_detail.php?id=298 Thu, 07 Jun 2018 12:00:00 +0800 Google has released security patch levels of 2018-06-01 and 2018-06-05 to fix 56 vulnerabilities identified in various Android devices.

]]> Security Alert (A18-06-03): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=297 https://www.govcert.gov.hk/en/alerts_detail.php?id=297 Thu, 07 Jun 2018 12:00:00 +0800 Mozilla has published a security advisory to address a vulnerability found in Firefox.

]]> Security Alert (A18-06-02): Multiple Vulnerabilities in Cisco IOS https://www.govcert.gov.hk/en/alerts_detail.php?id=296 https://www.govcert.gov.hk/en/alerts_detail.php?id=296 Thu, 07 Jun 2018 12:00:00 +0800 Cisco has released a security advisory fixing a vulnerability in several Cisco products.

]]> Security Alert (A18-06-01): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=295 https://www.govcert.gov.hk/en/alerts_detail.php?id=295 Mon, 04 Jun 2018 12:00:00 +0800 Apple has released security updates in its latest iOS version 11.4 to fix 35 vulnerabilities identified in various iOS devices.

]]> Security Alert (A18-05-06): New Variants of Meltdown and Spectre Vulnerabilities in Processors https://www.govcert.gov.hk/en/alerts_detail.php?id=294 https://www.govcert.gov.hk/en/alerts_detail.php?id=294 Wed, 23 May 2018 12:00:00 +0800 Google Project Zero and Microsoft have recently disclosed the Rogue System Register Read (RSRE, Variant 3a) and Speculative Store Bypass (SSB, Variant 4) which are related to the previous Meltdown and Spectre vulnerabilities announced in January 2018.

]]> Security Alert (A18-05-05): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=293 https://www.govcert.gov.hk/en/alerts_detail.php?id=293 Mon, 21 May 2018 12:00:00 +0800 Multiple vulnerabilities were found in the ISC BIND software.

]]> Security Alert (A18-05-04): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=292 https://www.govcert.gov.hk/en/alerts_detail.php?id=292 Tue, 15 May 2018 12:00:00 +0800 Security updates are released for Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> Security Alert (A18-05-03): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=291 https://www.govcert.gov.hk/en/alerts_detail.php?id=291 Thu, 10 May 2018 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A18-05-02): Vulnerability in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=290 https://www.govcert.gov.hk/en/alerts_detail.php?id=290 Wed, 09 May 2018 12:00:00 +0800 Adobe released a security update to address a vulnerability found in the Adobe Flash Player.

]]> High Threat Security Alert (A18-05-01): Multiple Vulnerabilities in Microsoft Products (May 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=289 https://www.govcert.gov.hk/en/alerts_detail.php?id=289 Wed, 09 May 2018 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> High Threat Security Alert (A18-04-04): Multiple Vulnerabilities in Microsoft Products (April 2018) (Updated) https://www.govcert.gov.hk/en/alerts_detail.php?id=281 https://www.govcert.gov.hk/en/alerts_detail.php?id=281 Mon, 30 Apr 2018 12:00:00 +0800 There are reports that exploit code targeting the particular vulnerability is now publicly available. Users of 64-bit versions of Windows 7 and Windows Server 2008 R2 are recommended to apply the April Windows patches immediately owing to the escalated risks.

]]> High Threat Security Alert (A18-04-11): Multiple Vulnerabilities in PHP https://www.govcert.gov.hk/en/alerts_detail.php?id=288 https://www.govcert.gov.hk/en/alerts_detail.php?id=288 Mon, 30 Apr 2018 12:00:00 +0800 Multiple vulnerabilities have been found in PHP. Reports indicate that there is elevated risk of cyber attacks on vulnerable systems.

]]> High Threat Security Alert (A18-04-10): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=287 https://www.govcert.gov.hk/en/alerts_detail.php?id=287 Thu, 26 Apr 2018 12:00:00 +0800 Drupal released a security update to fix a critical vulnerability (CVE-2018-7602). Multiple attack vectors could be adopted to exploit the vulnerabilities.

]]> Security Alert (A18-04-09): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=286 https://www.govcert.gov.hk/en/alerts_detail.php?id=286 Wed, 25 Apr 2018 12:00:00 +0800 On 24 April 2018, Apple released security updates in its latest iOS version 11.3.1 to fix 4 vulnerabilities identified in various iOS devices.

]]> Security Alert (A18-04-08): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=285 https://www.govcert.gov.hk/en/alerts_detail.php?id=285 Thu, 19 Apr 2018 12:00:00 +0800 Cisco has released 7 security advisories fixing a number of vulnerabilities in several Cisco products.

]]> Security Alert (A18-04-07): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=284 https://www.govcert.gov.hk/en/alerts_detail.php?id=284 Wed, 18 Apr 2018 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> High Threat Security Alert (A18-04-06): Protecting the Network Infrastructure https://www.govcert.gov.hk/en/alerts_detail.php?id=283 https://www.govcert.gov.hk/en/alerts_detail.php?id=283 Wed, 18 Apr 2018 12:00:00 +0800 Reports indicate that there is elevated risk of cyber attacks on vulnerable network devices. Users are advised to patch and harden all network devices immediately.

]]> Security Alert (A18-04-05): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=282 https://www.govcert.gov.hk/en/alerts_detail.php?id=282 Wed, 11 Apr 2018 12:00:00 +0800 Adobe released a security update to address vulnerabilities found in the Adobe Flash Player.

]]> Security Alert (A18-04-04): Multiple Vulnerabilities in Microsoft Products (April 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=281 https://www.govcert.gov.hk/en/alerts_detail.php?id=281 Wed, 11 Apr 2018 12:00:00 +0800 Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A18-04-03): Vulnerability in Microsoft Malware Protection Engine https://www.govcert.gov.hk/en/alerts_detail.php?id=280 https://www.govcert.gov.hk/en/alerts_detail.php?id=280 Wed, 04 Apr 2018 12:00:00 +0800 Microsoft has released a security update addressing a vulnerability in the Microsoft Malware Protection Engine.

]]> Security Alert (A18-04-02): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=279 https://www.govcert.gov.hk/en/alerts_detail.php?id=279 Tue, 03 Apr 2018 12:00:00 +0800 On 29 March 2018, Apple released security updates in its latest iOS version 11.3 to fix 44 vulnerabilities identified in various iOS devices.

]]> Security Alert (A18-04-01): Vulnerability in Microsoft Products https://www.govcert.gov.hk/en/alerts_detail.php?id=278 https://www.govcert.gov.hk/en/alerts_detail.php?id=278 Tue, 03 Apr 2018 12:00:00 +0800 Microsoft has released a security advisory addressing the kernel-level privilege escalation vulnerability, affecting Microsoft Windows 7(x64) and Server 2008 R2(x64). Reports indicate that the proof-of-concept exploit code is available on the Internet.

]]> Security Alert (A18-03-08): Vulnerability in Drupal https://www.govcert.gov.hk/en/alerts_detail.php?id=277 https://www.govcert.gov.hk/en/alerts_detail.php?id=277 Thu, 29 Mar 2018 12:00:00 +0800 Drupal has published a security advisory to address a vulnerability found in Drupal core.

]]> High Threat Security Alert (A18-03-07): Multiple Vulnerabilities in Cisco Products (March 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=276 https://www.govcert.gov.hk/en/alerts_detail.php?id=276 Thu, 29 Mar 2018 12:00:00 +0800 Cisco has released 20 security advisories fixing a number of vulnerabilities in Cisco IOS and IOS XE software, of which 3 advisories are rated as critical and 17 advisories are rated as high.

]]> Security Alert (A18-03-06): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=275 https://www.govcert.gov.hk/en/alerts_detail.php?id=275 Mon, 19 Mar 2018 12:00:00 +0800 Mozilla has published a security advisory to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A18-03-05): Vulnerability in VMware Products https://www.govcert.gov.hk/en/alerts_detail.php?id=274 https://www.govcert.gov.hk/en/alerts_detail.php?id=274 Mon, 19 Mar 2018 12:00:00 +0800 VMware has published a security advisory to address a vulnerability found in VMware Workstation version 12.x and 14.x, as well as VMWare Fusion version 8.x and 10.x.

]]> Security Alert (A18-03-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=273 https://www.govcert.gov.hk/en/alerts_detail.php?id=273 Wed, 14 Mar 2018 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A18-03-03): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=272 https://www.govcert.gov.hk/en/alerts_detail.php?id=272 Wed, 14 Mar 2018 12:00:00 +0800 Adobe released a security update to address vulnerabilities found in the Adobe Flash Player.

]]> Security Alert (A18-03-02): Multiple Vulnerabilities in Microsoft Products (March 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=271 https://www.govcert.gov.hk/en/alerts_detail.php?id=271 Wed, 14 Mar 2018 12:00:00 +0800 Microsoft has released 47 security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A18-03-01): Multiple Vulnerabilities in IBM Notes https://www.govcert.gov.hk/en/alerts_detail.php?id=270 https://www.govcert.gov.hk/en/alerts_detail.php?id=270 Fri, 09 Mar 2018 12:00:00 +0800 Multiple vulnerabilities are found in IBM Notes and its System Diagnostics service.

]]> Security Alert (A18-02-04): Multiple Vulnerabilities in Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=269 https://www.govcert.gov.hk/en/alerts_detail.php?id=269 Wed, 14 Feb 2018 12:00:00 +0800 Security updates are released for Adobe Reader/Acrobat to address multiple vulnerabilities.

]]> Security Alert (A18-02-03): Multiple Vulnerabilities in Microsoft Products (February 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=268 https://www.govcert.gov.hk/en/alerts_detail.php?id=268 Wed, 14 Feb 2018 12:00:00 +0800 Microsoft has released 32 security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A18-02-02): Multiple Vulnerabilities in IBM Notes https://www.govcert.gov.hk/en/alerts_detail.php?id=267 https://www.govcert.gov.hk/en/alerts_detail.php?id=267 Fri, 09 Feb 2018 12:00:00 +0800 Multiple vulnerabilities are found in IBM Lotus Notes System Debugger (NSD).

]]> High Threat Security Alert (A18-02-01): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=266 https://www.govcert.gov.hk/en/alerts_detail.php?id=266 Wed, 07 Feb 2018 12:00:00 +0800 Adobe has released a security update to address vulnerabilities found in the Adobe Flash Player. Reports indicate that one of the vulnerabilities is being exploited in the wild against Windows users.

]]> Security Alert (A18-01-15): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=265 https://www.govcert.gov.hk/en/alerts_detail.php?id=265 Tue, 30 Jan 2018 12:00:00 +0800 Mozilla has published a security advisory to address a browser user interface (UI) vulnerability found in Firefox.

]]> Security Alert (A18-01-14): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=264 https://www.govcert.gov.hk/en/alerts_detail.php?id=264 Tue, 30 Jan 2018 12:00:00 +0800 Cisco has released the security advisory to address a vulnerability in Cisco ASA software with the webvpn feature enabled.

]]> Security Alert (A18-01-13): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=263 https://www.govcert.gov.hk/en/alerts_detail.php?id=263 Wed, 24 Jan 2018 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A18-01-12): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=262 https://www.govcert.gov.hk/en/alerts_detail.php?id=262 Wed, 24 Jan 2018 12:00:00 +0800 Apple released security updates in its latest iOS version 11.2.5 to fix 13 vulnerabilities identified in various iOS devices.

]]> Security Alert (A18-01-11): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=261 https://www.govcert.gov.hk/en/alerts_detail.php?id=261 Wed, 17 Jan 2018 12:00:00 +0800 A vulnerability was found in the ISC BIND software.

]]> Security Alert (A18-01-10): Multiple Vulnerabilities in Oracle Java and Oracle Products (January 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=260 https://www.govcert.gov.hk/en/alerts_detail.php?id=260 Wed, 17 Jan 2018 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products. Patches are also available for some products to address the Meltdown and Spectre issues.

]]> Security Alert (A18-01-09): Multiple Vulnerabilities in Hypervisors https://www.govcert.gov.hk/en/alerts_detail.php?id=259 https://www.govcert.gov.hk/en/alerts_detail.php?id=259 Fri, 12 Jan 2018 12:00:00 +0800 The recent disclosed security issues, known as Meltdown and Spectre, affects most hypervisors in a virtualised environment.

]]> High Threat Security Alert (A18-01-03): Multiple Vulnerabilities in Microsoft Products (Updated) https://www.govcert.gov.hk/en/alerts_detail.php?id=253 https://www.govcert.gov.hk/en/alerts_detail.php?id=253 Wed, 10 Jan 2018 12:00:00 +0800 Microsoft has provided further information for the compatibility issues relating to AMD CPU Microprocessors and Anti-malware Software

]]> Security Alert (A18-01-08): Vulnerability in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=258 https://www.govcert.gov.hk/en/alerts_detail.php?id=258 Wed, 10 Jan 2018 12:00:00 +0800 Adobe released a security update to address a vulnerability found in the Adobe Flash Player.

]]> High Threat Security Alert (A18-01-07): Multiple Vulnerabilities in Microsoft Products (January 2018) https://www.govcert.gov.hk/en/alerts_detail.php?id=257 https://www.govcert.gov.hk/en/alerts_detail.php?id=257 Wed, 10 Jan 2018 12:00:00 +0800 Users are advised to take immediate action to patch the affected systems, especially for those installed with Microsoft Office, since exploitation has been reported in the wild.

]]> High Threat Security Alert (A18-01-06): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=256 https://www.govcert.gov.hk/en/alerts_detail.php?id=256 Tue, 09 Jan 2018 12:00:00 +0800 Users are advised to take immediate action to patch the affected iOS devices to address the well-known Spectre CPU issues with elevated risks.

]]> High Threat Security Alert (A18-01-05): Multiple Vulnerabilities in Linux/Unix Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=255 https://www.govcert.gov.hk/en/alerts_detail.php?id=255 Tue, 09 Jan 2018 12:00:00 +0800 Users are advised to take immediate action to patch the affected Linux/Unix systems to address the well-known Meltdown and Spectre CPU issues with elevated risks.

]]> High Threat Security Alert (A18-01-04): Multiple Vulnerabilities in Browsers https://www.govcert.gov.hk/en/alerts_detail.php?id=254 https://www.govcert.gov.hk/en/alerts_detail.php?id=254 Mon, 08 Jan 2018 12:00:00 +0800 Major browser vendors have published security advisories to address vulnerabilities. Users are advised to take immediate action to patch the affected browsers to address the well-known Meltdown and Spectre CPU issues with elevated risks.

]]> High Threat Security Alert (A18-01-03): Multiple Vulnerabilities in Microsoft Products https://www.govcert.gov.hk/en/alerts_detail.php?id=253 https://www.govcert.gov.hk/en/alerts_detail.php?id=253 Thu, 04 Jan 2018 12:00:00 +0800 Microsoft has released 18 security updates addressing multiple vulnerabilities which affect several Microsoft products or components. Users are advised to take immediate action to patch the affected systems since there is elevated risk of cyber attacks for the vulnerabilities.

]]> Security Alert (A18-01-02): Vulnerability in phpMyAdmin https://www.govcert.gov.hk/en/alerts_detail.php?id=252 https://www.govcert.gov.hk/en/alerts_detail.php?id=252 Wed, 03 Jan 2018 12:00:00 +0800 A Cross Site Request Forgery (CSRF) vulnerability has been found in phpMyAdmin version prior to 4.7.7.

]]> Security Alert (A18-01-01): Multiple Vulnerabilities in VMware vSphere Data Protection https://www.govcert.gov.hk/en/alerts_detail.php?id=251 https://www.govcert.gov.hk/en/alerts_detail.php?id=251 Wed, 03 Jan 2018 12:00:00 +0800 VMware has published a security advisory to address multiple vulnerabilities found in VMware vSphere Data Protection (VDP) version 5.x, 6.0.x, 6.1.x.

]]> Security Alert (A17-12-07): Multiple Vulnerabilities in Microsoft Products (December 2017) (Updated) https://www.govcert.gov.hk/en/alerts_detail.php?id=248 https://www.govcert.gov.hk/en/alerts_detail.php?id=248 Fri, 22 Dec 2017 12:00:00 +0800 As a proof-of-concept exploit code against the Windows vulnerabilities was reported to be publicly released soon, the risk of cyber attacks on the vulnerable systems will be elevated. Users are advised to take immediate action to patch the Windows operating systems.

]]> Security Alert (A17-12-09): Vulnerability in TLS RSA Cipher Suites https://www.govcert.gov.hk/en/alerts_detail.php?id=250 https://www.govcert.gov.hk/en/alerts_detail.php?id=250 Wed, 13 Dec 2017 12:00:00 +0800 A vulnerability is found in the implementation of TLS network security protocol affecting those TLS servers with RSA cipher suites enabled.

]]> Security Alert (A17-12-08): Vulnerability in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=249 https://www.govcert.gov.hk/en/alerts_detail.php?id=249 Wed, 13 Dec 2017 12:00:00 +0800 Adobe released a security update to address a vulnerability found in the Adobe Flash Player.

]]> Security Alert (A17-12-07): Multiple Vulnerabilities in Microsoft Products (December 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=248 https://www.govcert.gov.hk/en/alerts_detail.php?id=248 Wed, 13 Dec 2017 12:00:00 +0800 Microsoft has released 23 security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A17-12-06): Vulnerability in Hewlett-Packard (HP) Products https://www.govcert.gov.hk/en/alerts_detail.php?id=247 https://www.govcert.gov.hk/en/alerts_detail.php?id=247 Mon, 11 Dec 2017 12:00:00 +0800 HP released a security update to fix a vulnerability identified in certain versions of Synaptics touchpad drivers used by some models of HP products

]]> Security Alert (A17-12-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=246 https://www.govcert.gov.hk/en/alerts_detail.php?id=246 Fri, 08 Dec 2017 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A17-12-04): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=245 https://www.govcert.gov.hk/en/alerts_detail.php?id=245 Thu, 07 Dec 2017 12:00:00 +0800 On 2 December 2017, Apple released security updates in its latest iOS version 11.2 to fix 14 vulnerabilities identified in various iOS devices.

]]> Security Alert (A17-12-03): Vulnerability in Microsoft Malware Protection Engine https://www.govcert.gov.hk/en/alerts_detail.php?id=244 https://www.govcert.gov.hk/en/alerts_detail.php?id=244 Thu, 07 Dec 2017 12:00:00 +0800 Microsoft has released a security update addressing a vulnerability in the Microsoft Malware Protection Engine.

]]> Security Alert (A17-12-02): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=243 https://www.govcert.gov.hk/en/alerts_detail.php?id=243 Tue, 05 Dec 2017 12:00:00 +0800 Mozilla has published a security advisory to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A17-12-01): Multiple Vulnerabilities in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=242 https://www.govcert.gov.hk/en/alerts_detail.php?id=242 Mon, 04 Dec 2017 12:00:00 +0800 Apache has released a new version of Apache Struts to address multiple vulnerabilities affecting systems that use the Struts REST plugin.

]]> Security Alert (A17-11-05): Multiple Vulnerabilities in Intel Products https://www.govcert.gov.hk/en/alerts_detail.php?id=240 https://www.govcert.gov.hk/en/alerts_detail.php?id=240 Wed, 22 Nov 2017 12:00:00 +0800 Intel has published a security advisory to address multiple vulnerabilities in Intel manageability products with the objective of enhancing firmware resilience.

]]> Security Alert (A17-11-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=239 https://www.govcert.gov.hk/en/alerts_detail.php?id=239 Wed, 15 Nov 2017 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A17-11-03): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=238 https://www.govcert.gov.hk/en/alerts_detail.php?id=238 Wed, 15 Nov 2017 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities

]]> Security Alert (A17-11-02): Multiple Vulnerabilities in Microsoft Products (November 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=237 https://www.govcert.gov.hk/en/alerts_detail.php?id=237 Wed, 15 Nov 2017 12:00:00 +0800 Microsoft has released 50 security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A17-11-01): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=236 https://www.govcert.gov.hk/en/alerts_detail.php?id=236 Wed, 01 Nov 2017 12:00:00 +0800 On 31 October 2017, Apple released security updates in its latest iOS version 11.1 to fix 20 vulnerabilities identified in various iOS devices. Multiple attack vectors could be adopted to exploit the vulnerabilities.

]]> Security Alert (A17-10-06): Multiple Vulnerabilities in Oracle Java and Oracle Products (October 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=235 https://www.govcert.gov.hk/en/alerts_detail.php?id=235 Wed, 18 Oct 2017 12:00:00 +0800 Oracle has released Critical Patch Update Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A17-10-05): Vulnerability in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=234 https://www.govcert.gov.hk/en/alerts_detail.php?id=234 Tue, 17 Oct 2017 12:00:00 +0800 Security update is released for Adobe Flash Player to address vulnerability caused by type confusion.

]]> Security Alert (A17-10-04): Multiple Vulnerabilities in WPA2 https://www.govcert.gov.hk/en/alerts_detail.php?id=233 https://www.govcert.gov.hk/en/alerts_detail.php?id=233 Tue, 17 Oct 2017 12:00:00 +0800 Multiple vulnerabilities are found in WPA2 encryption protocol for Wi-Fi. An attacker within range of a Wi-Fi network access point and client may be exploited by hackers using the vulnerabilities.

]]> Security Alert (A17-10-03): Multiple Vulnerabilities in Microsoft Products (October 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=232 https://www.govcert.gov.hk/en/alerts_detail.php?id=232 Wed, 11 Oct 2017 12:00:00 +0800 Microsoft has released 50 security updates addressing multiple vulnerabilities which affect several Microsoft products or components

]]> Security Alert (A17-10-02): Multiple Vulnerabilities in Dnsmasq https://www.govcert.gov.hk/en/alerts_detail.php?id=231 https://www.govcert.gov.hk/en/alerts_detail.php?id=231 Wed, 04 Oct 2017 12:00:00 +0800 Multiple vulnerabilities are found in the Dnsmasq software package. Reports indicate that the proof-of-concept exploit code is available on the Internet.

]]> Security Alert (A17-10-01): Multiple Vulnerabilities in IBM Notes and Domino https://www.govcert.gov.hk/en/alerts_detail.php?id=230 https://www.govcert.gov.hk/en/alerts_detail.php?id=230 Wed, 04 Oct 2017 12:00:00 +0800 Multiple vulnerabilities are found in IBM Notes and Domino. The bundled Java virtual machine (JVM) is susceptible to different attacks.

]]> Security Alert (A17-09-10): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=229 https://www.govcert.gov.hk/en/alerts_detail.php?id=229 Fri, 29 Sep 2017 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A17-09-09): Vulnerability in Linux Kernel https://www.govcert.gov.hk/en/alerts_detail.php?id=228 https://www.govcert.gov.hk/en/alerts_detail.php?id=228 Thu, 28 Sep 2017 12:00:00 +0800 A vulnerability was found in the memory management of the affected Linux operating systems.

]]> Security Alert (A17-09-08): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=227 https://www.govcert.gov.hk/en/alerts_detail.php?id=227 Thu, 28 Sep 2017 12:00:00 +0800 Cisco has released the security advisories to address the vulnerabilities in Cisco IOS and IOS XE software.

]]> Security Alert (A17-09-07): Multiple Vulnerabilities in Broadcom Wireless Chipset https://www.govcert.gov.hk/en/alerts_detail.php?id=226 https://www.govcert.gov.hk/en/alerts_detail.php?id=226 Wed, 27 Sep 2017 12:00:00 +0800 Multiple vulnerabilities are found in Apple and Android devices built upon Broadcom BCM4355C0 model of wireless chipset.

]]> Security Alert (A17-09-06): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=225 https://www.govcert.gov.hk/en/alerts_detail.php?id=225 Wed, 27 Sep 2017 12:00:00 +0800 Apple has released software update fixing 62 vulnerabilities in iOS versions prior to iOS 11.0.1.

]]> Security Alert (A17-09-05): Multiple Vulnerabilities in Bluetooth Implementation https://www.govcert.gov.hk/en/alerts_detail.php?id=224 https://www.govcert.gov.hk/en/alerts_detail.php?id=224 Wed, 13 Sep 2017 12:00:00 +0800 8 vulnerabilities, collectively named as “BlueBorne”, are found in the implementation of the Bluetooth protocol in different platforms. An attacker could exploit these vulnerabilities through Bluetooth connections without devices paired in advance.

]]> Security Alert (A17-09-04): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=223 https://www.govcert.gov.hk/en/alerts_detail.php?id=223 Wed, 13 Sep 2017 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by memory corruption.

]]> Security Alert (A17-09-03): Multiple Vulnerabilities in Microsoft Products (September 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=222 https://www.govcert.gov.hk/en/alerts_detail.php?id=222 Wed, 13 Sep 2017 12:00:00 +0800 Microsoft has released 80 security updates addressing multiple vulnerabilities which affect several Microsoft products or components and one of them enhancing the security as a defense in depth measure. Exploitation has been reported in the wild.

]]> Security Alert (A17-09-02): Vulnerabilities in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=221 https://www.govcert.gov.hk/en/alerts_detail.php?id=221 Wed, 06 Sep 2017 12:00:00 +0800 Apache has released a new version of Apache Struts with fixes for multiple vulnerabilities. Reports indicate that the vulnerability mentioned in S2-052 allows an attacker to perform arbitrary code execution through special crafted XML requests.

]]> Security Alert (A17-09-01): Multiple Vulnerabilities in IBM Notes https://www.govcert.gov.hk/en/alerts_detail.php?id=220 https://www.govcert.gov.hk/en/alerts_detail.php?id=220 Fri, 01 Sep 2017 12:00:00 +0800 Multiple vulnerabilities are found in IBM Lotus Notes related to open source libraries and program flaws.

]]> Security Alert (A17-05-05): Multiple Vulnerabilities in Apple iOS (Updated) https://www.govcert.gov.hk/en/alerts_detail.php?id=200 https://www.govcert.gov.hk/en/alerts_detail.php?id=200 Fri, 25 Aug 2017 12:00:00 +0800 There are reports that the researchers who discovered some of the vulnerabilities have recently released the proof-of-concept but fully workable exploit code on the Internet. The public availability of the exploit code may lead to elevated risk of cyber attacks against the vulnerabilities. You are advised to take immediate action to upgrade to the latest Apple iOS version, if you have not done so.

]]> Security Alert (A17-08-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=219 https://www.govcert.gov.hk/en/alerts_detail.php?id=219 Wed, 09 Aug 2017 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. These vulnerabilities are caused by XUL injection, use-after-free error, memory safety bugs, buffer overflow, out-of-bounds read, domain hijacking, same-origin policy bypass, and memory protections bypass, etc.

]]> Security Alert (A17-08-03): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=218 https://www.govcert.gov.hk/en/alerts_detail.php?id=218 Wed, 09 Aug 2017 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities caused by security bypass, type confusion, memory corruption, use-after-free error, insufficient verification of data authenticity and heap overflow.

]]> Security Alert (A17-08-02): Multiple Vulnerabilities in IBM Notes and Domino https://www.govcert.gov.hk/en/alerts_detail.php?id=217 https://www.govcert.gov.hk/en/alerts_detail.php?id=217 Wed, 09 Aug 2017 12:00:00 +0800 Multiple vulnerabilities are found in IBM Notes and Domino. The bundled Java virtual machine (JVM) is susceptible to different attacks which could be remotely exploited without authentication.

]]> Security Alert (A17-08-01): Multiple Vulnerabilities in Microsoft Products (August 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=216 https://www.govcert.gov.hk/en/alerts_detail.php?id=216 Wed, 09 Aug 2017 12:00:00 +0800 Microsoft has released 31 security updates addressing multiple vulnerabilities which affect several Microsoft products or components. There is elevated risk of cyber attacks for the vulnerabilities.

]]> Security Alert (A17-07-06): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=215 https://www.govcert.gov.hk/en/alerts_detail.php?id=215 Mon, 24 Jul 2017 12:00:00 +0800 Apple has released software update fixing 47 vulnerabilities in iOS versions prior to iOS 10.3.3. These vulnerabilities are caused by the problems in various iOS components.

]]> Security Alert (A17-07-05): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=214 https://www.govcert.gov.hk/en/alerts_detail.php?id=214 Wed, 19 Jul 2017 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A17-07-04): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=213 https://www.govcert.gov.hk/en/alerts_detail.php?id=213 Wed, 12 Jul 2017 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A17-07-03): Multiple Vulnerabilities in Microsoft Products (July 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=212 https://www.govcert.gov.hk/en/alerts_detail.php?id=212 Wed, 12 Jul 2017 12:00:00 +0800 Microsoft has released 59 security updates addressing multiple vulnerabilities which affect several Microsoft products or components and one of them referring to previous security bulletins which have undergone a major revision increment.

]]> Security Alert (A17-07-02): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=211 https://www.govcert.gov.hk/en/alerts_detail.php?id=211 Mon, 10 Jul 2017 12:00:00 +0800 A vulnerability is relevant if the Apache Struts system adopts the "Struts 2 Struts 1 plugin".

]]> Security Alert (A17-07-01): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=210 https://www.govcert.gov.hk/en/alerts_detail.php?id=210 Fri, 07 Jul 2017 12:00:00 +0800 Cisco has released a security advisory to address the vulnerabilities of Simple Network Management Protocol (SNMP) in Cisco IOS and IOS XE software.

]]> Security Alert (A17-06-07): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=209 https://www.govcert.gov.hk/en/alerts_detail.php?id=209 Fri, 30 Jun 2017 12:00:00 +0800 Multiple vulnerabilities were found in the ISC BIND software. A remote attacker that can send and receive messages to an authoritative DNS server and with knowledge of a valid Transaction Signature (TSIG) key name could send specially crafted packets to read or manipulate zone contents.

]]> Security Alert (A17-06-06): Defences against the "Petrwrap" Ransomware Attack https://www.govcert.gov.hk/en/alerts_detail.php?id=208 https://www.govcert.gov.hk/en/alerts_detail.php?id=208 Wed, 28 Jun 2017 12:00:00 +0800 The recent worldwide ransomware attack named as "Petrwrap" is spreading wildly in Europe and has already affected many organisations including governments and public utilities.

]]> Security Alert (A17-06-05): Multiple Vulnerabilities in Linux/Unix Operating Systems https://www.govcert.gov.hk/en/alerts_detail.php?id=207 https://www.govcert.gov.hk/en/alerts_detail.php?id=207 Fri, 23 Jun 2017 12:00:00 +0800 Multiple vulnerabilities were found in the memory management of the affected operating systems. These vulnerabilities can lead to privilege escalation on these systems by corrupting memory and executing arbitrary code.

]]> Security Alert (A17-06-04): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=206 https://www.govcert.gov.hk/en/alerts_detail.php?id=206 Fri, 16 Jun 2017 12:00:00 +0800 Multiple vulnerabilities were found in the ISC BIND software.

]]> Security Alert (A17-06-03): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=205 https://www.govcert.gov.hk/en/alerts_detail.php?id=205 Wed, 14 Jun 2017 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. These vulnerabilities are caused by memory safety bugs, library flaw, out-of-bounds read and use-after-free error, etc.

]]> Security Alert (A17-06-02): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=204 https://www.govcert.gov.hk/en/alerts_detail.php?id=204 Wed, 14 Jun 2017 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by memory corruption and use-after-free error.

]]> Security Alert (A17-06-01): Multiple Vulnerabilities in Microsoft Products (June 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=203 https://www.govcert.gov.hk/en/alerts_detail.php?id=203 Wed, 14 Jun 2017 12:00:00 +0800 Microsoft has released 79 security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A17-05-07): Vulnerability in Synology DiskStation Manager (DSM) for Network Attached Storage (NAS) servers https://www.govcert.gov.hk/en/alerts_detail.php?id=202 https://www.govcert.gov.hk/en/alerts_detail.php?id=202 Mon, 29 May 2017 12:00:00 +0800 A vulnerability is found in the Synology DSM for NAS servers. A remote authenticated attacker could exploit the vulnerability by uploading a shared library to a writable shared folder for remote execution.

]]> Security Alert (A17-05-06): Multiple Vulnerabilities in IBM Notes and Domino https://www.govcert.gov.hk/en/alerts_detail.php?id=201 https://www.govcert.gov.hk/en/alerts_detail.php?id=201 Wed, 24 May 2017 12:00:00 +0800 Multiple vulnerabilities are found in IBM Notes and Domino. The bundled Java virtual machine (JVM) is susceptible to different attacks as listed in the Oracle Critical Patch Update Advisories (Jan 2017) which could be remotely exploited without authentication.

]]> Security Alert (A17-05-05): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=200 https://www.govcert.gov.hk/en/alerts_detail.php?id=200 Thu, 18 May 2017 12:00:00 +0800 Apple has released software update fixing 41 vulnerabilities in iOS versions prior to iOS 10.3.2. These vulnerabilities are caused by the problems in various iOS components.

]]> Security Alert (A17-05-04) : Defences against the “WannaCry” Ransomware Attack https://www.govcert.gov.hk/en/alerts_detail.php?id=199 https://www.govcert.gov.hk/en/alerts_detail.php?id=199 Sun, 14 May 2017 12:00:00 +0800 Further to our previous Security Alert (A17-03-03), your urgent step-up actions are called for to ward off the “WannaCry” ransomware attacks and ensure that your computer would not be affected by the attacks.

]]> Security Alert (A17-03-03): Multiple Vulnerabilities in Microsoft Products (March 2017) (Updated) https://www.govcert.gov.hk/en/alerts_detail.php?id=34 https://www.govcert.gov.hk/en/alerts_detail.php?id=34 Sat, 13 May 2017 12:00:00 +0800 There are reports of worldwide ransomware attack named "WannaCry" or "WanaCrypt0r 2.0", which exploits the Microsoft Windows Server Message Block (SMB) vulnerability (MS17-010).

]]> Security Alert (A17-05-03): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=197 https://www.govcert.gov.hk/en/alerts_detail.php?id=197 Wed, 10 May 2017 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by memory corruption and use-after-free error.

]]> Security Alert (A17-05-02): Multiple Vulnerabilities in Microsoft Products (May 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=198 https://www.govcert.gov.hk/en/alerts_detail.php?id=198 Wed, 10 May 2017 12:00:00 +0800 Microsoft has released 57 security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A17-05-01): Vulnerability in Intel Products https://www.govcert.gov.hk/en/alerts_detail.php?id=196 https://www.govcert.gov.hk/en/alerts_detail.php?id=196 Thu, 04 May 2017 12:00:00 +0800 Intel has issued a security advisory to address a privilege escalation vulnerability in Intel manageability products including Intel Active Management Technology (AMT), Intel Small Business Technology (SBT), and Intel Standard Manageability (ISM).

]]> Security Alert (A17-04-08): Vulnerability in IBM Domino https://www.govcert.gov.hk/en/alerts_detail.php?id=195 https://www.govcert.gov.hk/en/alerts_detail.php?id=195 Fri, 21 Apr 2017 12:00:00 +0800 IBM has issued a security bulletin to address a stack-based buffer overflow vulnerability in IMAP service. Reports indicate that there is public exploit code available.

]]> Security Alert (A17-04-07): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=194 https://www.govcert.gov.hk/en/alerts_detail.php?id=194 Thu, 20 Apr 2017 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A17-04-06): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=193 https://www.govcert.gov.hk/en/alerts_detail.php?id=193 Wed, 19 Apr 2017 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A17-04-05): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=192 https://www.govcert.gov.hk/en/alerts_detail.php?id=192 Thu, 13 Apr 2017 12:00:00 +0800 Multiple vulnerabilities were found in the ISC BIND software. Both authoritative and recursive name servers are affected.

]]> Security Alert (A17-04-04): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=191 https://www.govcert.gov.hk/en/alerts_detail.php?id=191 Wed, 12 Apr 2017 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities caused by heap buffer overflow, integer buffer overflow, use-after-free error, memory corruption, and directory search path issue.

]]> Security Alert (A17-04-03): Multiple Vulnerabilities in Microsoft Products (April 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=190 https://www.govcert.gov.hk/en/alerts_detail.php?id=190 Wed, 12 Apr 2017 12:00:00 +0800 Microsoft has released 46 security updates addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A17-04-02): Vulnerability in Microsoft Office https://www.govcert.gov.hk/en/alerts_detail.php?id=189 https://www.govcert.gov.hk/en/alerts_detail.php?id=189 Tue, 11 Apr 2017 12:00:00 +0800 A vulnerability is caused by the OLE2Link object issue. Reports indicate that the vulnerability is being exploited in the wild.

]]> Security Alert (A17-04-01): Vulnerability in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=188 https://www.govcert.gov.hk/en/alerts_detail.php?id=188 Fri, 07 Apr 2017 12:00:00 +0800 Apple has released software update fixing one vulnerability in iOS versions prior to iOS 10.3.1.

]]> Security Alert (A17-03-10): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=187 https://www.govcert.gov.hk/en/alerts_detail.php?id=187 Thu, 30 Mar 2017 12:00:00 +0800 Apple has released software update fixing 88 vulnerabilities in iOS versions prior to iOS 10.3.

]]> Security Alert (A17-03-09): Multiple Vulnerabilities in IBM Notes https://www.govcert.gov.hk/en/alerts_detail.php?id=186 https://www.govcert.gov.hk/en/alerts_detail.php?id=186 Tue, 28 Mar 2017 12:00:00 +0800 Multiple vulnerabilities are found in IBM Lotus Notes related to Expat XML Parser.

]]> Security Alert (A17-03-08): Multiple Vulnerabilities in Cisco Products (March 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=185 https://www.govcert.gov.hk/en/alerts_detail.php?id=185 Thu, 23 Mar 2017 12:00:00 +0800 Cisco has released 5 security advisories fixing a number of vulnerabilities in Cisco IOS and IOS XE software.

]]> Security Alert (A17-03-07): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=184 https://www.govcert.gov.hk/en/alerts_detail.php?id=184 Mon, 20 Mar 2017 12:00:00 +0800 Cisco has released a security advisory about a vulnerability in Cisco devices.

]]> Security Alert (A17-03-06): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=183 https://www.govcert.gov.hk/en/alerts_detail.php?id=183 Mon, 20 Mar 2017 12:00:00 +0800 Mozilla has published a security advisory to address a vulnerability found in Firefox. This vulnerability is caused by integer overflow.

]]> Security Alert (A17-03-05): Vulnerability in Linux Kernel https://www.govcert.gov.hk/en/alerts_detail.php?id=32 https://www.govcert.gov.hk/en/alerts_detail.php?id=32 Fri, 17 Mar 2017 12:00:00 +0800 Microsoft has released a security bulletin (MS17-005 Security Update for Adobe Flash Player) fixing multiple vulnerabilities in Adobe Flash Player installing on all supported editions of Microsoft Windows.

]]> Security Alert (A17-03-04): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=33 https://www.govcert.gov.hk/en/alerts_detail.php?id=33 Wed, 15 Mar 2017 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by buffer overflow, memory corruption, random number generator flaw and use-after-free error.

]]> Security Alert (A17-03-03): Multiple Vulnerabilities in Microsoft Products (March 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=34 https://www.govcert.gov.hk/en/alerts_detail.php?id=34 Wed, 15 Mar 2017 12:00:00 +0800 Microsoft has released 18 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A17-03-02): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=26 https://www.govcert.gov.hk/en/alerts_detail.php?id=26 Wed, 08 Mar 2017 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. These vulnerabilities are caused by memory corruption, use-after-free error and memory safety bugs, etc.

]]> Security Alert (A17-03-01): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=22 https://www.govcert.gov.hk/en/alerts_detail.php?id=22 Wed, 08 Mar 2017 12:00:00 +0800 A vulnerability is found at the jakarta based file upload Multipart parser of Apache Struts2 that could allow remote code execution at the affected application server.

]]> Security Alert (A17-02-03): Adobe Flash Player Vulnerabilities in Microsoft Products https://www.govcert.gov.hk/en/alerts_detail.php?id=18 https://www.govcert.gov.hk/en/alerts_detail.php?id=18 Wed, 22 Feb 2017 12:00:00 +0800 Microsoft has released a security bulletin (MS17-005 Security Update for Adobe Flash Player) fixing multiple vulnerabilities in Adobe Flash Player installing on all supported editions of Microsoft Windows.

]]> Security Alert (A17-02-02): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=21 https://www.govcert.gov.hk/en/alerts_detail.php?id=21 Wed, 15 Feb 2017 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by integer overflow, heap buffer overflow, use-after-free error, memory corruption, and type confusion.

]]> Security Alert (A17-02-01): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=27 https://www.govcert.gov.hk/en/alerts_detail.php?id=27 Fri, 10 Feb 2017 12:00:00 +0800 A vulnerability were found in the ISC BIND software. A remote attacker could send a specially crafted query to trigger an assertion failure or read a NULL pointer which could cause the BIND to exit.

]]> Security Alert (A17-01-06): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=28 https://www.govcert.gov.hk/en/alerts_detail.php?id=28 Thu, 26 Jan 2017 12:00:00 +0800 Apple has released software update fixing 18 vulnerabilities in iOS versions prior to iOS 10.2.1. These vulnerabilities are caused by the problems in various iOS components.

]]> Security Alert (A17-01-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=29 https://www.govcert.gov.hk/en/alerts_detail.php?id=29 Wed, 25 Jan 2017 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. These vulnerabilities are caused by memory corruption, use-after-free error and memory safety bugs, etc.

]]> Security Alert (A17-01-04): Multiple Vulnerabilities in Oracle Java and Oracle Products (January 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=30 https://www.govcert.gov.hk/en/alerts_detail.php?id=30 Wed, 18 Jan 2017 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A17-01-03): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=24 https://www.govcert.gov.hk/en/alerts_detail.php?id=24 Thu, 12 Jan 2017 12:00:00 +0800 Multiple vulnerabilities were found in the ISC BIND software. Both authoritative and recursive name servers are affected.

]]> Security Alert (A17-01-02): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=23 https://www.govcert.gov.hk/en/alerts_detail.php?id=23 Wed, 11 Jan 2017 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities caused by heap buffer overflow, use-after-free error, security bypass, memory corruption, and type confusion.

]]> Security Alert (A17-01-01): Multiple Vulnerabilities in Microsoft Products (January 2017) https://www.govcert.gov.hk/en/alerts_detail.php?id=19 https://www.govcert.gov.hk/en/alerts_detail.php?id=19 Wed, 11 Jan 2017 12:00:00 +0800 Microsoft has released 4 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A16-12-07): Vulnerability in PHPMailer https://www.govcert.gov.hk/en/alerts_detail.php?id=35 https://www.govcert.gov.hk/en/alerts_detail.php?id=35 Wed, 28 Dec 2016 12:00:00 +0800 A vulnerability is found in the PHPMailer plugin that could lead to remote arbitrary code execution.

]]> Security Alert (A16-12-06): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=36 https://www.govcert.gov.hk/en/alerts_detail.php?id=36 Thu, 15 Dec 2016 12:00:00 +0800 Apple has released software update fixing 12 vulnerabilities in iOS versions prior to iOS 10.2.

]]> Security Alert (A16-12-05): Multiple Vulnerabilities in IBM Notes https://www.govcert.gov.hk/en/alerts_detail.php?id=37 https://www.govcert.gov.hk/en/alerts_detail.php?id=37 Thu, 15 Dec 2016 12:00:00 +0800 Multiple vulnerabilities are found in IBM Lotus Notes related to Apache Struts and Taglibs.

]]> Security Alert (A16-12-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=38 https://www.govcert.gov.hk/en/alerts_detail.php?id=38 Wed, 14 Dec 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. These vulnerabilities are caused by memory corruption, buffer overflow, use-after-free error, memory safety bugs and security restriction bypass, etc.

]]> Security Alert (A16-12-03): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=39 https://www.govcert.gov.hk/en/alerts_detail.php?id=39 Wed, 14 Dec 2016 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by buffer overflow, memory corruption, security restriction bypass and use-after-free errors. Reports indicate that one of the vulnerabilities is being actively exploited in the wild.

]]> Security Alert (A16-12-02): Multiple Vulnerabilities in Microsoft Products (December 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=40 https://www.govcert.gov.hk/en/alerts_detail.php?id=40 Wed, 14 Dec 2016 12:00:00 +0800 Microsoft has released 12 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components

]]> Security Alert (A16-12-01): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=41 https://www.govcert.gov.hk/en/alerts_detail.php?id=41 Thu, 01 Dec 2016 12:00:00 +0800 Mozilla has published a security advisory to address a vulnerability found in Firefox. This vulnerability is caused by use-after-free error. Reports indicate that the vulnerability is being actively exploited in the wild.

]]> Security Alert (A16-11-06): Vulnerability in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=42 https://www.govcert.gov.hk/en/alerts_detail.php?id=42 Tue, 29 Nov 2016 12:00:00 +0800 Mozilla has published a security advisory to address a vulnerability found in Firefox. This vulnerability is caused by redirection from a HTTP connection to a data: URL.

]]> Security Alert (A16-11-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=43 https://www.govcert.gov.hk/en/alerts_detail.php?id=43 Wed, 16 Nov 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A16-11-04): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=44 https://www.govcert.gov.hk/en/alerts_detail.php?id=44 Wed, 09 Nov 2016 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by type confusion and use-after-free errors.

]]> Security Alert (A16-11-03): Multiple Vulnerabilities in Microsoft Products (November 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=45 https://www.govcert.gov.hk/en/alerts_detail.php?id=45 Wed, 09 Nov 2016 12:00:00 +0800 Microsoft has released 14 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components. Reports indicate that the vulnerabilities mentioned in MS16-132 and MS16-135 are being exploited in wild. In addition, there are scattered exploits observed against the vulnerabilities mentioned in MS16-129 and MS16-142.

]]> Security Alert (A16-11-02): Vulnerability in Microsoft Windows https://www.govcert.gov.hk/en/alerts_detail.php?id=46 https://www.govcert.gov.hk/en/alerts_detail.php?id=46 Wed, 02 Nov 2016 12:00:00 +0800 A vulnerability was identified in Microsoft Windows Kernel. A local user can obtain elevated privileges on the target system when invoking a specially crafted system call.

]]> Security Alert (A16-11-01): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=47 https://www.govcert.gov.hk/en/alerts_detail.php?id=47 Wed, 02 Nov 2016 12:00:00 +0800 A vulnerability was found in the ISC BIND software. Both authoritative and recursive name servers are affected.

]]> Security Alert (A16-10-11): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=48 https://www.govcert.gov.hk/en/alerts_detail.php?id=48 Thu, 27 Oct 2016 12:00:00 +0800 Apple has released software update fixing 14 vulnerabilities in iOS versions prior to iOS 10.1.

]]> Security Alert (A16-10-10): Vulnerability in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=49 https://www.govcert.gov.hk/en/alerts_detail.php?id=49 Thu, 27 Oct 2016 12:00:00 +0800 Security update is released for Adobe Flash Player to address a vulnerability caused by use-after-free error.

]]> Security Alert (A16-10-09): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=50 https://www.govcert.gov.hk/en/alerts_detail.php?id=50 Mon, 24 Oct 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A16-10-08): Vulnerability in Linux Kernel https://www.govcert.gov.hk/en/alerts_detail.php?id=51 https://www.govcert.gov.hk/en/alerts_detail.php?id=51 Mon, 24 Oct 2016 12:00:00 +0800 A local privilege escalation vulnerability is found in the Linux kernel 2.6.22 or later.

]]> Security Alert (A16-10-07): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=52 https://www.govcert.gov.hk/en/alerts_detail.php?id=52 Mon, 24 Oct 2016 12:00:00 +0800 A vulnerability was found in the ISC BIND software released before May 2013 and in third-party versions that do not include fix number 3548.

]]> Security Alert (A16-10-06): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=53 https://www.govcert.gov.hk/en/alerts_detail.php?id=53 Thu, 20 Oct 2016 12:00:00 +0800 A vulnerability is found in the Convention plugin of Apache Struts that could allow path traversal and arbitrary code execution.

]]> Security Alert (A16-10-05): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=54 https://www.govcert.gov.hk/en/alerts_detail.php?id=54 Thu, 20 Oct 2016 12:00:00 +0800 Cisco has released three security advisories fixing a number of vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower System Software.

]]> Security Alert (A16-10-04): Multiple Vulnerabilities in Oracle Java and Oracle Products (October 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=55 https://www.govcert.gov.hk/en/alerts_detail.php?id=55 Wed, 19 Oct 2016 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A16-10-03): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=56 https://www.govcert.gov.hk/en/alerts_detail.php?id=56 Wed, 12 Oct 2016 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities caused by heap buffer overflow, integer overflow, use-after-free error, security bypass, memory corruption, and type confusion.

]]> Security Alert (A16-10-02): Multiple Vulnerabilities in Microsoft Products (October 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=57 https://www.govcert.gov.hk/en/alerts_detail.php?id=57 Wed, 12 Oct 2016 12:00:00 +0800 Microsoft has released 10 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components. Reports indicate that some of the vulnerabilities are being actively exploited in wild.

]]> Security Alert (A16-10-01): Multiple Vulnerabilities in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=58 https://www.govcert.gov.hk/en/alerts_detail.php?id=58 Thu, 06 Oct 2016 12:00:00 +0800 Cisco has released 5 security advisories fixing a number of vulnerabilities in Cisco NX-OS Software.

]]> Security Alert (A16-09-09): Multiple Vulnerabilities in Cisco Products (September 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=59 https://www.govcert.gov.hk/en/alerts_detail.php?id=59 Fri, 30 Sep 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A16-09-08): Vulnerability in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=60 https://www.govcert.gov.hk/en/alerts_detail.php?id=60 Wed, 28 Sep 2016 12:00:00 +0800 A vulnerability was found in the ISC BIND software. All name servers are vulnerable if they can receive request packets from any source.

]]> Security Alert (A16-09-07): Multiple vulnerabilities in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=61 https://www.govcert.gov.hk/en/alerts_detail.php?id=61 Fri, 23 Sep 2016 12:00:00 +0800 Multiple vulnerabilities are found in the OpenSSL library.

]]> Security Alert (A16-09-06): Multiple vulnerabilities in Apple iTunes for Windows https://www.govcert.gov.hk/en/alerts_detail.php?id=62 https://www.govcert.gov.hk/en/alerts_detail.php?id=62 Fri, 23 Sep 2016 12:00:00 +0800 Apple has released software update fixing eleven vulnerabilities in iTunes for Windows prior to version 12.5.1.

]]> Security Alert (A16-09-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=63 https://www.govcert.gov.hk/en/alerts_detail.php?id=63 Wed, 21 Sep 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A16-09-04): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=64 https://www.govcert.gov.hk/en/alerts_detail.php?id=64 Tue, 20 Sep 2016 12:00:00 +0800 A vulnerability was identified in IKEv1 packet processing code on Cisco IOS, IOS XE and IOS XR Software.

]]> Security Alert (A16-09-03): Multiple vulnerabilities in IBM Notes https://www.govcert.gov.hk/en/alerts_detail.php?id=65 https://www.govcert.gov.hk/en/alerts_detail.php?id=65 Mon, 19 Sep 2016 12:00:00 +0800 Multiple vulnerabilities are found in IBM Lotus Notes related to Apache Xerces-C XML Parser library.

]]> Security Alert (A16-09-02): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=66 https://www.govcert.gov.hk/en/alerts_detail.php?id=66 Wed, 14 Sep 2016 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by integer overflow, use-after-free error, security bypass and memory corruption.

]]> Security Alert (A16-09-01): Multiple Vulnerabilities in Microsoft Products (September 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=67 https://www.govcert.gov.hk/en/alerts_detail.php?id=67 Wed, 14 Sep 2016 12:00:00 +0800 Microsoft has released 14 security bulletins. Reports indicate that the vulnerabilities of Internet Explorer and Edge are being actively exploited in wild.

]]> Update of Security Alert (A16-08-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=74 https://www.govcert.gov.hk/en/alerts_detail.php?id=74 Thu, 08 Sep 2016 12:00:00 +0800 To address all QuadRooter vulnerabilities, Google has provided patches to device manufacturers for their further testing and distribution to their customers' devices...

]]> Security Alert (A16-08-08): Multiple Vulnerabilities in IBM Notes and Domino https://www.govcert.gov.hk/en/alerts_detail.php?id=68 https://www.govcert.gov.hk/en/alerts_detail.php?id=68 Tue, 30 Aug 2016 12:00:00 +0800 Multiple vulnerabilities are found in IBM Notes and Domino. The bundled Java virtual machine (JVM) is susceptible to different attacks as listed in the Oracle Critical Patch Update Advisories (July 2016) which could be remotely exploited without authentication.

]]> Security Alert (A16-08-07): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=69 https://www.govcert.gov.hk/en/alerts_detail.php?id=69 Fri, 26 Aug 2016 12:00:00 +0800 Apple has released software update fixing three vulnerabilities in iOS versions prior to iOS 9.3.5. Reports indicate that the vulnerabilities are being exploited in the wild.

]]> Security Alert (A16-08-06): Multiple Vulnerabilities in Cisco Products (August 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=70 https://www.govcert.gov.hk/en/alerts_detail.php?id=70 Mon, 22 Aug 2016 12:00:00 +0800 Cisco has released three security advisories fixing a number of vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Management Center.

]]> Security Alert (A16-08-05): Multiple Vulnerabilities in IBM Notes https://www.govcert.gov.hk/en/alerts_detail.php?id=71 https://www.govcert.gov.hk/en/alerts_detail.php?id=71 Thu, 18 Aug 2016 12:00:00 +0800 IBM has published few security bulletins to address multiple vulnerabilities related to Pixman library, XStream, and IBM Java SDK used in Notes. The bundled Java virtual machine (JVM) is susceptible to different attacks.......

]]> Security Alert (A16-08-04): Vulnerability in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=72 https://www.govcert.gov.hk/en/alerts_detail.php?id=72 Tue, 16 Aug 2016 12:00:00 +0800 Apple has released software update fixing a vulnerability in iOS versions prior to iOS 9.3.4......

]]> Security Alert (A16-08-03): Multiple Vulnerabilities in Microsoft Products (August 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=73 https://www.govcert.gov.hk/en/alerts_detail.php?id=73 Wed, 10 Aug 2016 12:00:00 +0800 Microsoft has released 9 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A16-08-02): Multiple Vulnerabilities in Android https://www.govcert.gov.hk/en/alerts_detail.php?id=74 https://www.govcert.gov.hk/en/alerts_detail.php?id=74 Tue, 09 Aug 2016 12:00:00 +0800 Multiple vulnerabilities are found in Android devices built on Qualcomm chipsets called "QuadRooter". An attacker could exploit these vulnerabilities using a malicious app which requires no special permissions.

]]> Security Alert (A16-08-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=75 https://www.govcert.gov.hk/en/alerts_detail.php?id=75 Wed, 03 Aug 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. These vulnerabilities are caused by memory safety bugs in the browser engine, buffer overflow, stack buffer underflow, use-after-free error, integer overflow, and type confusion flaw, etc.

]]> Security Alert (A16-07-04): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=76 https://www.govcert.gov.hk/en/alerts_detail.php?id=76 Wed, 27 Jul 2016 12:00:00 +0800 Apple has released software update fixing 43 vulnerabilities in iOS versions prior to iOS 9.3.3.

]]> Security Alert (A16-07-03): Multiple Vulnerabilities in Oracle Java and Oracle Products (July 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=77 hhttps://www.govcert.gov.hk/en/alerts_detail.php?id=77 Thu, 21 Jul 2016 12:00:00 +0800 Oracle has released Critical Patch Update Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

]]> Security Alert (A16-07-02): Multiple Vulnerabilities in Adobe Flash Player and Adobe Reader/Acrobat https://www.govcert.gov.hk/en/alerts_detail.php?id=78 https://www.govcert.gov.hk/en/alerts_detail.php?id=78 Wed, 13 Jul 2016 12:00:00 +0800 Security updates are released for Adobe Flash Player and Adobe Reader/Acrobat to address multiple vulnerabilities caused by various buffer overflow, use-after-free error, security restrictions bypass, memory corruption/leak, race condition problem, type confusion and stack corruption.

]]> Security Alert (A16-07-01): Multiple Vulnerabilities in Microsoft Products (July 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=79 https://www.govcert.gov.hk/en/alerts_detail.php?id=79 Wed, 13 Jul 2016 12:00:00 +0800 Microsoft has released 11 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A16-06-04): Multiple Vulnerabilities in Symantec Products https://www.govcert.gov.hk/en/alerts_detail.php?id=80 https://www.govcert.gov.hk/en/alerts_detail.php?id=80 Thu, 30 Jun 2016 12:00:00 +0800 Apple has released software update fixing 39 vulnerabilities in iOS versions prior to iOS 9.3.2. These vulnerabilities are caused by problems in various iOS components.

]]> Security Alert (A16-06-03): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=81 https://www.govcert.gov.hk/en/alerts_detail.php?id=81 Fri, 17 Jun 2016 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by type confusion, use-after-free problem, buffer overflow, memory corruption and directory search path errors.

]]> Security Alert (A16-06-02): Multiple Vulnerabilities in Microsoft Products (June 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=82 https://www.govcert.gov.hk/en/alerts_detail.php?id=82 Wed, 15 Jun 2016 12:00:00 +0800 Microsoft has released 16 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A16-06-01): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=83 https://www.govcert.gov.hk/en/alerts_detail.php?id=83 Wed, 08 Jun 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. These vulnerabilities are caused by memory safety bugs in the browser engine, memory corruption, buffer overflow, use-after-free error and Mozilla Windows updater could be used to overwrite arbitrary files.

]]> Security Alert (A16-05-05): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=84 https://www.govcert.gov.hk/en/alerts_detail.php?id=84 Wed, 25 May 2016 12:00:00 +0800 Apple has released software update fixing 39 vulnerabilities in iOS versions prior to iOS 9.3.2. These vulnerabilities are caused by problems in various iOS components.

]]> Security Alert (A16-05-04): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=85 https://www.govcert.gov.hk/en/alerts_detail.php?id=85 Fri, 13 May 2016 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities. It is reported that the vulnerability CVE-2016-4117 is being actively exploited.

]]> Security Alert (A16-05-03): Multiple Vulnerabilities in Adobe Acrobat/Reader https://www.govcert.gov.hk/en/alerts_detail.php?id=86 https://www.govcert.gov.hk/en/alerts_detail.php?id=86 Wed, 11 May 2016 12:00:00 +0800 Security updates are released for Adobe Acrobat/Reader to address multiple vulnerabilities....

]]> Security Alert (A16-05-02): Multiple Vulnerabilities in Microsoft Products (May 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=87 https://www.govcert.gov.hk/en/alerts_detail.php?id=87 Wed, 11 May 2016 12:00:00 +0800 Microsoft has released 16 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A16-05-01): Multiple Vulnerabilities in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=88 https://www.govcert.gov.hk/en/alerts_detail.php?id=88 Wed, 4 May 2016 12:00:00 +0800 Multiple vulnerabilities are found in the OpenSSL library. The vulnerabilities are caused by padding oracle weakness, and memory corruption when applications parse and re-encode X.509 certificates, or verify RSA signatures on X.509 certificates....

]]> Security Alert (A16-04-06): Vulnerability in Apache Struts https://www.govcert.gov.hk/en/alerts_detail.php?id=89 https://www.govcert.gov.hk/en/alerts_detail.php?id=89 Thu, 28 Apr 2016 12:00:00 +0800 A vulnerability is found in Apache Struts that could allow remote code execution. Reports indicate that exploit code was released and the vulnerability is being actively exploited in targeted attacks...

]]> Security Alert (A16-04-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=90 https://www.govcert.gov.hk/en/alerts_detail.php?id=90 Wed, 27 Apr 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox.

]]> Security Alert (A16-04-04): Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=91 https://www.govcert.gov.hk/en/alerts_detail.php?id=91 Wed, 20 Apr 2016 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products...

]]> Security Alert (A16-04-03): Multiple Vulnerabilities in Apple QuickTime https://www.govcert.gov.hk/en/alerts_detail.php?id=92 https://www.govcert.gov.hk/en/alerts_detail.php?id=92 Fri, 15 Apr 2016 12:00:00 +0800 Multiple vulnerabilities are found in Apple QuickTime. A remote attacker could exploit the vulnerabilities by enticing a user to open a specially crafted web page or movie file...

]]> Security Alert (A16-04-02): Multiple Vulnerabilities in Microsoft Products (April 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=93 https://www.govcert.gov.hk/en/alerts_detail.php?id=93 Wed, 13 Apr 2016 12:00:00 +0800 Microsoft has released 13 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A16-04-01): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=94 https://www.govcert.gov.hk/en/alerts_detail.php?id=94 Thu, 8 Apr 2016 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by memory layout randomisation problem, type confusion, security bypass, use-after-free, stack overflow and memory corruption errors.


It is reported that the vulnerability CVE-2016-1019 is being actively exploited for Windows systems running Flash Player version 20.0.0.306 and earlier.

]]> Security Alert (A16-03-10): Multiple Vulnerabilities in Apple iOS https://www.govcert.gov.hk/en/alerts_detail.php?id=95 https://www.govcert.gov.hk/en/alerts_detail.php?id=95 Thu, 31 Mar 2016 12:00:00 +0800 Apple has released software update fixing 39 vulnerabilities in iOS versions prior to iOS 9.3. These vulnerabilities are caused by problems in various iOS components. There are multiple attack vectors, the attacker could bypass Apple's certificate pinning and inject messages, or entice a user to connect a USB device, open a specially crafted PDF file, font file, XML document, web page or install a malicious application to exploit the vulnerabilities.

]]> Security Alert (A16-03-09): Vulnerability in Oracle Java https://www.govcert.gov.hk/en/alerts_detail.php?id=96 https://www.govcert.gov.hk/en/alerts_detail.php?id=96 Thu, 24 Mar 2016 12:00:00 +0800 Oracle has published a security advisory to address a security vulnerability found in Java SE sub-component Hotspot that could be exploited without authentication. An attacker could entice a user to open a specially crafted web page to exploit the vulnerability.


Reports indicate that technical details of the vulnerability are publicly disclosed.

]]> Security Alert (A16-03-08): Multiple Vulnerabilities in Cisco Products (March 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=97 https://www.govcert.gov.hk/en/alerts_detail.php?id=97 Thu, 24 Mar 2016 12:00:00 +0800 Cisco has released six security advisories fixing a number of vulnerabilities in Cisco IOS, IOS XE, NX-OS and Cisco Unified Communications Manager software. An unauthenticated remote attacker could exploit the vulnerabilities in relation to several functions or protocols including Session Initiation Protocol (SIP), DHCPv6 relay feature, handling of Internet Key Exchange version 2 (IKEv2) fragmentation code, smart install client feature, Locator/ID Separation Protocol (LISP), and Wide Area Application Services (WAAS) Express feature.

There are a multitude of attack vectors, a remote attacker could try to send malformed SIP message or LISP packet, specially crafted DHCPv6 relay message, UDP packets or Smart Install packets, or route a crafted TCP segment to/through a vulnerable device.

]]> Security Alert (A16-03-07): Multiple Vulnerabilities in Symantec Endpoint Protection https://www.govcert.gov.hk/en/alerts_detail.php?id=98 https://www.govcert.gov.hk/en/alerts_detail.php?id=98 Mon, 21 Mar 2016 12:00:00 +0800 Symantec has published a security advisory to address multiple vulnerabilities found in Symantec Endpoint Protection (SEP). These vulnerabilities are caused by insufficient security checks in SEP Manager (SEPM) and a problem in Application and Device Control component on a SEP client in validating external input. A remote attacker could entice a user to access a malicious link or open a malicious document to exploit the vulnerabilities.

]]> Security Alert (A16-03-06): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=99 https://www.govcert.gov.hk/en/alerts_detail.php?id=99 Fri, 11 Mar 2016 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by integer overflow, use-after-free, heap overflow and memory corruption errors. A remote attacker could entice a targeted user to open a specially crafted web page, Flash file, or document that supports embedded Flash content to exploit the vulnerabilities.

It is reported that an exploit for CVE-2016-1010 is being used in limited, targeted attacks.

]]> Security Alert (A16-03-05): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=100 https://www.govcert.gov.hk/en/alerts_detail.php?id=100 Thu, 10 Mar 2016 12:00:00 +0800 Multiple vulnerabilities are found in the ISC BIND software. A remote attacker could send a specially crafted query to trigger an assertion failure if DNS cookie support is enabled, remote commands on the control channel are accepted or when parsing signature records for DNAME records, causing the BIND to crash.

Both authoritative and recursive name servers are vulnerable to these problems.

]]> Security Alert (A16-03-04): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=101 https://www.govcert.gov.hk/en/alerts_detail.php?id=101 Wed, 9 Mar 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. These vulnerabilities are caused by memory safety bugs in the browser engine, out-of-bounds read in ServiceWorkerManager, multiple use-after-free issues, heap-based buffer overflow and a number of problems in the Graphite 2 library. A remote attacker could entice a user to open a web page with specially crafted content to exploit the vulnerabilities.

]]> Security Alert (A16-03-03): Multiple Vulnerabilities in Adobe Acrobat and Reader https://www.govcert.gov.hk/en/alerts_detail.php?id=102 https://www.govcert.gov.hk/en/alerts_detail.php?id=102 Wed, 9 Mar 2016 12:00:00 +0800 Security updates are released for Adobe Acrobat and Reader to address multiple vulnerabilities caused by memory corruption and a directory search path issue. To successfully exploit the vulnerabilities, a remote attacker could entice a targeted user to open a specially crafted PDF file.

]]> Security Alert (A16-03-02): Multiple Vulnerabilities in Microsoft Products (March 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=103 https://www.govcert.gov.hk/en/alerts_detail.php?id=103 Wed, 9 Mar 2016 12:00:00 +0800 Microsoft has released 13 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A16-03-01): Multiple vulnerabilities in IBM Notes https://www.govcert.gov.hk/en/alerts_detail.php?id=104 https://www.govcert.gov.hk/en/alerts_detail.php?id=104 Tue, 2 Mar 2016 12:00:00 +0800 Microsoft has released 13 security bulletins listed below addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A16-02-06): Vulnerability in GNU C Library (glibc) https://www.govcert.gov.hk/en/alerts_detail.php?id=105 https://www.govcert.gov.hk/en/alerts_detail.php?id=105 Thu, 18 Feb 2016 12:00:00 +0800 A vulnerability was identified in GNU C Library (glibc) which is used in many Linux or Unix-based OS. Due to a stack-based buffer overflow vulnerability in the function " getaddrinfo()", applications using the glibc DNS client side resolver to resolve hostnames are vulnerable to attacks when resolving attacker-controlled domain names, DNS servers, or through a man-in-the-middle attack. Proof-of-concept codes were tested to successfully exploit the vulnerability.

]]> Security Alert (A16-02-05): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=106 https://www.govcert.gov.hk/en/alerts_detail.php?id=106 Fri, 12 Feb 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. These vulnerabilities are caused by circumventing the validation of internal instruction parameters in the Graphite 2 and violating the same-origin-policy using Service Workers with plugins. A remote attacker could entice a user to open a web page with specially crafted content to exploit the vulnerabilities.

]]> Security Alert (A16-02-04): Vulnerability in Cisco Products https://www.govcert.gov.hk/en/alerts_detail.php?id=107 https://www.govcert.gov.hk/en/alerts_detail.php?id=107 Fri, 12 Feb 2016 12:00:00 +0800 Cisco has released a security advisory fixing a vulnerability in Cisco security appliances, virtual appliances and services modules:


  • Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability

Due to a buffer overflow in the affected system, an unauthenticated remote attacker could send crafted UDP packets to an affected system to exploit the vulnerability.

]]> Security Alert (A16-02-03): Vulnerability in Oracle Java https://www.govcert.gov.hk/en/alerts_detail.php?id=108 https://www.govcert.gov.hk/en/alerts_detail.php?id=108 Thu, 11 Feb 2016 12:00:00 +0800 Oracle has published a security advisory to address a security vulnerability found in Java SE. To exploit the vulnerability, an attacker could entice a user to open a specially crafted web page and download files into the user's system before installing a vulnerable version of Java SE 6, 7 or 8.

]]> Security Alert (A16-02-02): Multiple Vulnerabilities in Adobe Flash Player https://www.govcert.gov.hk/en/alerts_detail.php?id=109 https://www.govcert.gov.hk/en/alerts_detail.php?id=109 Thu, 11 Feb 2016 12:00:00 +0800 Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by memory corruption, heap buffer overflow, type confusion and use-after-free error. A remote attacker could entice a targeted user to open a specially crafted web page, Flash file, or document that supports embedded Flash content to exploit the vulnerabilities.

]]> Security Alert (A16-02-01): Multiple Vulnerabilities in Microsoft Products (February 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=110 https://www.govcert.gov.hk/en/alerts_detail.php?id=110 Thu, 11 Feb 2016 12:00:00 +0800 Microsoft has released 12 security bulletins listed below addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A16-01-09): Multiple Vulnerabilities in OpenSSL https://www.govcert.gov.hk/en/alerts_detail.php?id=111 https://www.govcert.gov.hk/en/alerts_detail.php?id=111 Fri, 29 Jan 2016 12:00:00 +0800 Multiple vulnerabilities are found in the OpenSSL library which may generate unsafe primes for use in the Diffie-Hellman protocol that may lead to disclosure of enough information for an attacker to recover the private encryption key. Moreover, a malicious client could negotiate SSLv2 ciphers that have been disabled on the server.

]]> Security Alert (A16-01-08): Multiple Vulnerabilities in Firefox https://www.govcert.gov.hk/en/alerts_detail.php?id=112 https://www.govcert.gov.hk/en/alerts_detail.php?id=112 Wed, 27 Jan 2016 12:00:00 +0800 Mozilla has published security advisories to address multiple vulnerabilities found in Firefox. These vulnerabilities are caused by memory safety bugs in the browser engine, memory corruption or buffer/integer overflow. A remote attacker could entice a user to open a web page with specially crafted content, malicious zip file or MP4 video file to exploit the vulnerabilities.

]]> Security Alert (A16-01-07): Vulnerability in Linux Kernel https://www.govcert.gov.hk/en/alerts_detail.php?id=113 https://www.govcert.gov.hk/en/alerts_detail.php?id=113 Thu, 21 Jan 2016 12:00:00 +0800 A local privilege escalation vulnerability is found in the Linux kernel 3.8 or later. A memory leak flaw exists in the Linux keyrings facility that manages key security data, authentication details and encryption keys could be exploited to expose cached sensitive information. A local attacker could obtain root privilege by running a specially crafted application locally.

Proof-of-concept exploit codes are publicly available to demonstrate how to gain escalated root privilege.

]]> Security Alert (A16-01-06): Multiple Vulnerabilities in Oracle Java and Oracle Products (January 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=114 https://www.govcert.gov.hk/en/alerts_detail.php?id=114 Wed, 20 Jan 2016 12:00:00 +0800 Oracle has released Critical Patch Update (CPU) Advisory with collections of patches for multiple security vulnerabilities found in Java SE and various Oracle products.

There are 8 vulnerabilities identified in Java affecting multiple sub-components including 2D, AWT, JAXP, JMX, Libraries, Networking and Security. 7 of them could be remotely exploited without authentication and 4 of them could affect server deployment of Java (e.g. through a web service).

For vulnerabilities identified in those Oracle products, they can be remotely exploited through various protocols including HTTP, HTTPS, JMS, MySQL Protocol, NFS, Oracle GoldenGate, Oracle Net, RPC, SMB, SSL/TLS, T3 and WebSocket over a network.

There are multiple attack vectors. For Java, an attacker could entice a user to open a specially crafted web page containing un-trusted Java applet or Java Web Start application with malicious content, or to launch executables using the Java launcher. For other Oracle products, a remote attacker could send specially crafted network packets to the affected system to exploit the vulnerabilities.

]]> Security Alert (A16-01-05): Multiple Vulnerabilities in ISC BIND https://www.govcert.gov.hk/en/alerts_detail.php?id=115 https://www.govcert.gov.hk/en/alerts_detail.php?id=115 Wed, 20 Jan 2016 12:00:00 +0800 Multiple vulnerabilities are found in the ISC BIND software. A remote attacker could send a specially crafted query to trigger a REQUIRE assertion failure which may cause the BIND to crash. In addition, a flaw in buffer size checking could cause the BIND to exit with an INSIST failure.

Both authoritative and recursive name servers are vulnerable to these problems.

]]> Security Alert (A16-01-04): Multiple Vulnerabilities in OpenSSH https://www.govcert.gov.hk/en/alerts_detail.php?id=116 https://www.govcert.gov.hk/en/alerts_detail.php?id=116 Fri, 15 Jan 2016 12:00:00 +0800 Multiple vulnerabilities are found in OpenSSH. A remote authenticated server could obtain potentially sensitive information from OpenSSH client memory or potentially execute arbitrary code on the target client system. An OpenSSH client connecting to a malicious OpenSSH server may have its private client user keys compromised or arbitrary codes executed.

]]> Security Alert (A16-01-03): Multiple Vulnerabilities in Adobe Acrobat and Reader https://www.govcert.gov.hk/en/alerts_detail.php?id=117 https://www.govcert.gov.hk/en/alerts_detail.php?id=117 Wed, 13 Jan 2016 12:00:00 +0800 Security updates are released for Adobe Acrobat and Reader to address multiple vulnerabilities caused by use-after-free error, double-free error, memory corruption, problems in Javascript API and directory search path problem in Adobe Download Manager.

]]> Security Alert (A16-01-02): Multiple Vulnerabilities in Microsoft Products (January 2016) https://www.govcert.gov.hk/en/alerts_detail.php?id=118 https://www.govcert.gov.hk/en/alerts_detail.php?id=118 Wed, 13 Jan 2016 12:00:00 +0800 Microsoft has released 9 security bulletins addressing multiple vulnerabilities which affect several Microsoft products or components.

]]> Security Alert (A16-01-01): Multiple Vulnerabilities in Apple QuickTime https://www.govcert.gov.hk/en/alerts_detail.php?id=119 https://www.govcert.gov.hk/en/alerts_detail.php?id=119 Fri, 08 Jan 2016 12:00:00 +0800 Multiple vulnerabilities are found in Apple QuickTime. A remote attacker could exploit the vulnerabilities by enticing a user to open a specially crafted movie file.

]]>