2023-08 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 (KB5029651)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2023-08 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 for x64 (KB5029651)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

August 8, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5029651)

August 8, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 KB5029651 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framewo...

August 8, 2023—KB5029296 (Monthly Rollup)

August 8, 2023—KB5029296 Monthly Rollup Applies To Windows Server 2008 R2 Enterprise ESU Windows Server 2008 R2 Standard ESU Windows Server 2008 R2 Datacenter ESU Windows Embedded Standard 7 ESU Windows Embedded POSReady 7 ESU Note REMINDER As of January 10, 2023, Microsoft no longer provides...

August 8, 2023—KB5029308 (Security-only update)

August 8, 2023—KB5029308 Security-only update Applies To Windows Server 2012 Note IMPORTANT Windows Server 2012 end of support EOS date is October 10, 2023. Extended Security Updates ESUs will be available for purchase no later than October 2022, but available for installation after the EOS date,...

August 8, 2023—KB5029312 (Monthly Rollup)

August 8, 2023—KB5029312 Monthly Rollup Applies To Windows Server 2012 R2 Note REMINDER Windows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recommend upgrading them to ...

August 8, 2023—KB5029295 (Monthly Rollup)

August 8, 2023—KB5029295 Monthly Rollup Applies To Windows Server 2012 Note REMINDER Windows Server 2012 end of support EOS date is October 10, 2023. Extended Security Updates ESUs will be available for purchase no later than October 2022, but available for installation after the EOS date, Octobe...

SMM Memory Corruption Vulnerability

Bulletin ID: AMD-SB-4003 Potential Impact: Arbitrary Code Execution Severity: High Summary SMM memory corruption vulnerability in SMM driver on some AMD Processors. CVE-2023-20555 Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an...

Code Injection

wix-embedded-mysql is vulnerable to Code Injection. The vulnerability exists because the apply function of Setup.java as does not properly check if the argument is a Mysql executable, allowing an attacker to inject and execute malicious code...

PT-2023-9275 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to information disclosure while handling SA query action frame. It is also described as a buffer overflow operation in the memory of...

com.wix:wix-embedded-mysql-download-and-extract (3.0.2) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.0.2)

com.wix:wix-embedded-mysql MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 3.0.2 Source cves: CVE-2023-39021 Source advisory:...

GHSA-FX3V-4W3W-WPWR Code injection in wix-embedded-mysql

wix-embedded-mysql v4.6.2 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

com.github.michaelruocco.mysql:embedded-mysql-plugin (>=0.1.0, <=0.4.0), com.github.michaelruocco:embedded-mysql-plugin (1.0.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (1.0.2)

com.wix:wix-embedded-mysql MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco.mysql:embedded-mysql-plugin =0.1.0, =0.4.0 -...

com.github.michaelruocco:embedded-mysql-plugin (2.1.6), com.wix:wix-embedded-mysql-download-and-extract (3.0.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.0.0)

com.wix:wix-embedded-mysql MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.1.6 - com.wix:wix-embedded-mysql-download-and-extract 3.0....

com.github.michaelruocco:embedded-mysql-plugin (2.0.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (1.0.3)

com.wix:wix-embedded-mysql MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.0.0 Source cves: CVE-2023-39021 Source advisory:...

com.github.atool:generator (>=1.3.17, <=1.4.0), com.github.charlemaznable:embedded-mysql-extension (>=0.0.3, <=2022.0.2) +18 more potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (>=4.0.0, <=4.6.2)

com.wix:wix-embedded-mysql MAVEN version =4.0.0, =1.3.17, =0.0.3, =2.1.7, =2.1.7, =4.0.0, =2.1.7, =springboot1.0.0.1, =0.0.1-alpha, =1.7.0, =1.4.0, =0.1.1, =0.1.1, =1.1.0, =1.1.4 and more Source cves: CVE-2023-39021 Source advisory: GHSA-FX3V-4W3W-WPWR...

com.github.michaelruocco:embedded-mysql-plugin (2.1.2) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.0.1)

com.wix:wix-embedded-mysql MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.1.2 Source cves: CVE-2023-39021 Source advisory:...

com.wix:wix-embedded-mysql-download-and-extract (3.1.1) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.1.1)

com.wix:wix-embedded-mysql MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 3.1.1 Source cves: CVE-2023-39021 Source advisory:...

com.wix:wix-embedded-mysql-download-and-extract (2.2.9) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.2.9)

com.wix:wix-embedded-mysql MAVEN version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 2.2.9 Source cves: CVE-2023-39021 Source advisory:...

com.github.michaelruocco:embedded-mysql-plugin (>=2.0.1, <=2.0.2) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.0.0)

com.wix:wix-embedded-mysql MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin =2.0.1, =2.0.2 Source cves: CVE-2023-39021 Source advisory:...