Security updates have been issued by Ivanti to address 27 issues impacting its Avalanche mobile device management solution, according to BleepingComputer. Most severe of the remediated vulnerabilities are two critical heap overflow bugs within the solution’s WLInfoRailService and WLAvalancheService components, tracked as CVE-2024-24996 and CVE-2024-29204, which could be exploited to facilitate arbitrary command execution without any user interaction.

Source: SC Magazine