RealNetworks, Inc. Releases Security Updates for RealPlayer
RealNetworks, Inc. has released security updates to address a vulnerability affecting Windows RealPlayer 14.0.1 and earlier versions and RealPlayer Enterprise 2.1.4 and earlier versions. Exploitation of this vulnerability may allow an attacker to execute arbitrary code in the context of the browser.
US-CERT encourages users and administrators to review the RealNetworks, Inc. security notice released on February 8, 2011 and upgrade to the most current version of RealPlayer to help mitigate the risks.
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2019-19006 Sangoma FreePBX Improper…