Security Updates for Microsoft Dynamics 365 (on-premises) (KB5032297) (November 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Microsoft Patch Tuesday, November 2023 Edition

Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three "zero day" vulnerabilities that Microsoft warns are already being exploited in active attacks. The zero-day threats targeting Microsoft this month...

Microsoft Releases November 2023 Security Updates

Microsoft has released updates addressing multiple vulnerabilities in Microsoft software. A cyber threat actor can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s November 2023 Security Update Guidelink is...

Fortinet Releases Security Updates for FortiClient and FortiGate

Fortinet has released security advisories addressing vulnerabilities in FortiClient and FortiGate. Cyber threat actors may exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Fortinet security advisories and...

Internet Explorer help

None None...

November 14, 2023—KB5032250 (Security-only update)

None None...

November 14, 2023—KB5032254 (Monthly Rollup)

None None...

November 14, 2023—KB5032248 (Security-only update)

None None...

November 14, 2023—KB5032252 (Monthly Rollup)

None None...

Vulnerabilities fixed in Microsoft System Center

Microsoft has fixed vulnerabilities in System Center. A malicious party could exploit the vulnerabilities to gain elevated permissions or gain access to sensitive data. For successful abuse, the malicious party needs local access. Open Management Infrastructure:...

Security Updates for Microsoft Excel Products (November 2023)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-36041 - A security feature bypass...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23049)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23049 advisory. - Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of...

Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23049)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23049 advisory. - Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of...

Security Updates for Azure CLI (November 2023)

The Azure CLI is missing security updates. It is, therefore, affected by an Information Disclosure vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'...

Zoom Client for Meetings < 5.15.10 Vulnerability (ZSB-23048)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.15.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-23048 advisory. - Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23055)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23055 advisory. - Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via netwo...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23052)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23052 advisory. - Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information...

Security Updates for Microsoft SharePoint Server 2016 (November 2023)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Security Updates for Microsoft Office Products (Nov 2023) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the november-14-2023 advisory. - Microsoft Excel Security Feature Bypass Vulnerability CVE-2023-36037 - Microsoft Excel Remote Code Execution Vulnerability CVE-2023-36041 ...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23050)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23050 advisory. - Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access...