2023-10 Dynamic Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5031356)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2023-10 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5031356)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2023-10 Dynamic Cumulative Update for Windows 11 for ARM64-based Systems (KB5031358)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2023-10 Dynamic Cumulative Update for Windows 11 Version 22H2 for ARM64-based Systems (KB5031354)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2023-10 .NET 7.0.12 Security Update for ARM64 Client (KB5031901)

2023-10 .NET 7.0.12 Security Update for ARM64 Client KB5031901...

2023-10 .NET 6.0.23 Security Update for ARM64 Client (KB5031900)

2023-10 .NET 6.0.23 Security Update for ARM64 Client KB5031900...

2023-10 Cumulative Update for Windows 10 Version 1809 for ARM64-based Systems (KB5031361)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2023-09 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 23H2 for ARM64 (KB5031086)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Microsoft Win32K Security Vulnerability

Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. A security vulnerability exists in Microsoft Windows Win32K. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected: Windows Server 2012 R2,Windows...

Microsoft Windows Setup Files Cleanup Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Setup Files Cleanup. An attacker could exploit the vulnerability to remotely execute code. The following products and versions are...

Microsoft Windows Named Pipe File System Security Vulnerability

Microsoft Windows Named Pipe File System is a named pipe file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Named Pipe File System. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:...

CVE-2023-5370 arm64 boot CPUs may lack speculative execution protections

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculative execution workarounds being installed on CPU 0...

CVE-2023-5370 arm64 boot CPUs may lack speculative execution protections

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculative execution workarounds being installed on CPU 0...

FreeBSD : FreeBSD -- arm64 boot CPUs may lack speculative execution protections (162a675b-6251-11ee-8e38-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 162a675b-6251-11ee-8e38-002590c1f29c advisory. - On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This...

FreeBSD -- arm64 boot CPUs may lack speculative execution protections

Problem Description: On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. Impact: No speculative execution workarounds are installed on CPU 0...

FreeBSD-SA-23:14.smccc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-23:14.smccc Security Advisory The FreeBSD Project Topic: arm64 boot CPUs may lack speculative execution protections Category: core Module: arm64 Announced:...

Amazon Linux 2 : firefox (ALASFIREFOX-2023-006)

The version of firefox installed on the remote host is prior to 102.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2023-006 advisory. The Mozilla Foundation describes this issue as follows:Unexpected data returned from the Safe Browsing API could...

Important: firefox

Issue Overview: The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9. CVE-2022-29913 A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describe...

Important: firefox

Issue Overview: The Mozilla Foundation describes this issue as follows: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. CVE-2023-1945 The Mozilla Foundation describes this issue as follows: A website could have obscured...

USN-6383-1: Linux kernel vulnerabilities

Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data from division operations in certain situations. A local attacker could possibly use this to expose sensitive information. CVE-2023-20588 It was discovered...