CVEs
Moving CVEs past one-nation control
Sometimes you don’t know how much you will miss something until you (almost) lose it. That is certainly the case with the news on Tuesday that the MITRE Corporation had not received the funding necessary to continue operating the Common Vulnerabilities and Exposures (CVE) Program past April. Fortunately, the Cybersecurity Infrastructure Security Agency (CISA) stepped…
Industrial-strength April Patch Tuesday covers 135 CVEs
Microsoft on Tuesday released 135 patches affecting 19 product families. Ten of the addressed issues, all remote code execution issues, are considered by Microsoft to be of Critical severity, and 18 have a CVSS base score of 8.0 or higher. One, an Important-severity elevation of privilege issue touching the Windows Common Log File system driver,…