Vulnerabilities fixed in Lansweeper

Vulnerabilities have been fixed in Lansweeper. The vulnerabilities allow a malicious party to access sensitive data and to execute arbitrary code execute arbitrary code under administrator/root privileges. The vulnerabilities marked CVE-2022-32573 and CVE-2022-29517 are exploited by sending a rog...

Zoom Client for Meetings < 5.10.3 Vulnerability (ZSB-22010)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.10.3. It is, therefore, affected by a vulnerability as referenced in the ZSB-22010 advisory. - The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting witho...

Zoom Client for Meetings < 5.10.0 Vulnerability (ZSB-22008)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.10.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-22008 advisory. - The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before...

Zoom Client for Meetings < 5.2.0 Vulnerability (ZSB-21005)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.2.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-21005 advisory. - It was discovered that the installation packages of the Zoom Client for Meetings for macOS Standard and for IT Admin...

Zoom Client for Meetings < 5.9.6 Vulnerability (ZSB-22003)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.9.6. It is, therefore, affected by a vulnerability as referenced in the ZSB-22003 advisory. - The Zoom Client for Meetings for macOS Standard and for IT Admin prior to version 5.9.6 failed to properly check the...

Zoom Client for Meetings < 5.12.6 Vulnerability (ZSB-22025)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.12.6. It is, therefore, affected by a vulnerability as referenced in the ZSB-22025 advisory. - The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.12.6 is susceptible to a loca...

Zoom Client for Meetings < 5.9.7 Vulnerability (ZSB-22004)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.9.7. It is, therefore, affected by a vulnerability as referenced in the ZSB-22004 advisory. - The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to...

Zoom Client for Meetings < 5.5.4 Vulnerability (ZSB-21016)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.5.4. It is, therefore, affected by a vulnerability as referenced in the ZSB-21016 advisory. - The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files...

Security Updates for Microsoft ASP.NET Core (December 2022)

A remote code execution vulnerability exists in ASP.NET core 3.1, ASP.NET 6.0, and ASP.NET 7.0, where a malicious actor could cause a user to run arbitrary code as a result of parsing maliciously crafted xps files. Note that Nessus has not tested for this issue but has instead relied only on the...

Zoom Client for Meetings < 5.12.2 Vulnerability (ZSB-22024)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.12.2. It is, therefore, affected by a vulnerability as referenced in the ZSB-22024 advisory. - The Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.12.2 is susceptible to a URL...

December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More

Tech giant Microsoft released its last set of monthly security updates for 2022 with fixes for 49 vulnerabilities across its software products. Of the 49 bugs, six are rated Critical, 40 are rated Important, and three are rated Moderate in severity. The updates are in addition to 24 vulnerabiliti...

Security Updates for Microsoft Office Products (Dec 2022) (macOS)

The Microsoft Office product installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Office Graphics Remote Code Execution Vulnerability CVE-2022-44692 - An attacker could appear as a trusted user when they should not be. This...

OracleVM 3.4 : kernel-uek (OVMSA-2022-0032)

The remote OracleVM system is missing necessary patches to address security updates: - A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their...

The December 2022 Patch Tuesday Security Update Review

Welcome to the final second Tuesday of the year. As expected, Microsoft and Adobe have released their latest security updates and fixes. Take a break from your holiday preparations and join us as we review the details of the latest security patches. Microsoft Patches for December 2022 In this...

Guidance on Microsoft Signed Drivers Being Used Maliciously

Executive Summary: Microsoft was recently informed that drivers certified by Microsoft’s Windows Hardware Developer Program were being used maliciously in post-exploitation activity. Microsoft has completed its investigation and determined that the activity was limited to the abuse of several...

December 13, 2022—KB5021237 (OS Build 17763.3770) - EXPIRED

None None...

December 13, 2022—KB5021285 (Monthly Rollup)

None None...

December 13, 2022—KB5021291 (Monthly Rollup)

None None...

Microsoft Releases December 2022 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s December 2022 Security Update Guide and Deployment...

VMware Releases Security Updates for Multiple products

VVMware has released security updates to address multiple vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisories VMSA-2022-0031,...