Threat Source newsletter (June 3, 2021)

Summary: Cisco Talos reported that Trend Micro patched multiple vulnerabilities in its Home Network Security Station that could allow denial of service, privilege escalation, code execution, and takeover of connected PCs. Talos researchers also found multiple vulnerabilities in Accusoft ImageGear, including out-of-bounds write flaws CVE-2021-21793, CVE-2021-21794 and CVE-2021-21824 that an attacker could trigger by tricking a user into opening a malicious file.
Why it matters: The Trend Micro flaws sit in a device whose job is to protect the home network, so a takeover there puts every connected PC behind it at risk - and the ImageGear bugs need only a user opening a crafted file in a toolkit that supports more than 100 formats.

Read the original at Cisco Talos ↗

Topics: Endpoint & Network Security
Mentions: CVE-2021-21793 CVE-2021-21794 CVE-2021-21824
Related: Vulnerability Spotlight: Multiple vulnerabilities in Accusoft Image Gear Cyber Risks ·
Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026
Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026