Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities affecting Adobe software. A cyber threat actor can exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the...

September 12, 2023—KB5030265 (Monthly Rollup)

None None...

September 12, 2023—KB5030271 (Monthly Rollup)

None None...

September 12, 2023—KB5030286 (Security-only update)

None None...

September 12, 2023—KB5030279 (Security-only update)

None None...

Internet Explorer help

None None...

September 12, 2023—KB5030261 (Security-only update)

None None...

September 12, 2023—KB5030217 (OS Build 22000.2416)

None None...

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. %NASLMINLEVEL 70300 C...

RHEL 9 : libcap (RHSA-2023:5071)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5071 advisory. Libcap is a library for getting and setting POSIX.1e formerly POSIX 6 draft 15 capabilities. Security Fixes: libcap: Integer Overflow in...

Security Updates for Microsoft Office Products (September 2023)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

KB5030503: Servicing stack update for Windows 10: September 12, 2023

None None...

KB5030330: Servicing stack update for Windows Server 2012: September 12, 2023

KB5030330: Servicing stack update for Windows Server 2012: September 12, 2023 IMPORTANT Windows Server 2012 end of support EOS date is October 10, 2023. Extended Security Updates ESUs will be available for purchase no later than October 2022, but available for installation after the EOS date,...

KB5030329: Servicing stack update for Windows Server 2012 R2: September 12, 2023

KB5030329: Servicing stack update for Windows Server 2012 R2: September 12, 2023 REMINDER Windows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recommend upgrading them t...

Security Updates for Microsoft Visual Studio Products (September 2023)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in VSInstallerElevationService when running a malicious executable, which can lead to an Elevation of Privilege. CVE-2023-36758 - A vulnerability in...

KLA60004 Multiple vulnerabilities in Foxit PDF Reader

Multiple vulnerabilities were found in Foxit PDF Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Code execution vulnerability can be exploited remotely to execute arbitrary code. 2...

Security Updates for Microsoft Word Products (September 2023)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2023-36761 - A remote code execution vulnerability. An...

Security Updates for Microsoft SharePoint Server 2016 (September 2023)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2023-36764 - A remote code execution...

.NET 7.0 Update - September 12, 2023 (KB5030560)

None None...

Critical Remote Code Execution Vulnerabilities Discovered in ASUS Routers

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Three critical-severity remote code execution vulnerabilities have been identified in ASUS routers. These vulnerabilities have the potential to allow threat actors to take control of these devices...