13323 matches found
Security Updates for Microsoft Office Products (July 2023) (macOS)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, In...
Security Updates for Microsoft Dynamics 365 (on-premises) (July 2023)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote attacker can craft a specially-constructed URL which, when accessed by an authorised user, allows the attacker to retrieve cookies, present the user with a dialog...
Adobe Releases Security Updates for ColdFusion and InDesign
Adobe has released security updates to address vulnerabilities affecting ColdFusionlink is external and InDesignlink is external. An attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Adobe security...
July 11, 2023—KB5028224 (Security-only update)
None None...
July 11, 2023—KB5028228 (Monthly Rollup)
None None...
July 11, 2023—KB5028233 (Security-only update)
None None...
Guidance on Microsoft Signed Drivers Being Used Maliciously
Executive Summary: Microsoft was recently informed that drivers certified by Microsoft’s Windows Hardware Developer Program MWHDP were being used maliciously in post-exploitation activity. In these attacks, the attacker gained administrative privileges on compromised systems before using the...
Microsoft Guidance for Addressing Security Feature Bypass in Trend Micro EFI Modules
Trend Micro has released CVE-2023-28005 to address a secure boot bypass. Subsequently Microsoft has released the July Windows security updates to block the vulnerable UEFI modules by using the DBX UEFI Secure Boot Forbidden Signature Database disallow list. To exploit this vulnerability, an...
July 11, 2023—KB5028222 (Monthly Rollup)
None None...
July 11, 2023—KB5028186 (OS Build 10240.20048) - EXPIRED
None None...
July 11, 2023—KB5028226 (Security-only update)
None None...
July 11, 2023—KB5028240 (Monthly Rollup)
None None...
July 11, 2023—KB5028166 (OS Builds 19044.3208 and 19045.3208) - EXPIRED
None None...
Internet Explorer help
None None...
Security Updates for Microsoft Visual Studio Products (July 2023)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A vulnerability exist in ASP.NET Core applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords...
Security Updates for Microsoft SharePoint Server 2019 (July 2023)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Dynamics 365 on prem. A malicious party could exploit the vulnerabilities to launch a Cross-site scripting attack. Such an attack can lead to execution of arbitrary code in the context of the victim's browser, or access to sensitive data in the context of th...
Security Updates for Microsoft SharePoint Server 2016 (July 2023)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-33159 ...
Security Updates for Outlook (July 2023)
The Microsoft Outlook application installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-33151 - A...
Security Updates for Microsoft SharePoint Server Subscription Edition (July 2023)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security featur...