Security Updates for Microsoft Excel Products C2R (April 2024)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Fedora 38 : dotnet7.0 (2024-8fd3285bd9)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8fd3285bd9 advisory. This is the March 2024 update for .NET 7. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.17/7.0.17.md Tenable has extracted th...

Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included

Microsoft has released security updates for the month of April 2024 to remediate a record 149 flaws, two of which have come under active exploitation in the wild. Of the 149 flaws, three are rated Critical, 142 are rated Important, three are rated Moderate, and one is rated Low in severity. The...

Fedora 39 : rpm-ostree (2024-4afd3d38ae)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4afd3d38ae advisory. Backport fix for /etc/gshadow permissions Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Fedora 38 : dotnet8.0 (2024-1ef4b14811)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1ef4b14811 advisory. This is the March 2024 monthly update for .NET 8 for Fedora. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.3/8.0.3.md Tenable...

Fedora 39 : dotnet8.0 (2024-6462d0aa27)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-6462d0aa27 advisory. This is the March 2024 monthly update for .NET 8 for Fedora. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.3/8.0.3.md Tenable...

Security Updates for Azure CycleCloud (April 2024)

The Azure CycleCloud product is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. The attacker who successfully exploited this vulnerability could elevate privileges to the SuperUser role in the affected Azure CycleCloud instance. To exploit this...

Microsoft and Adobe Patch Tuesday, April 2024 Security Update Review

Welcome to another insightful dive into Microsofts Patch Tuesday! This months security updates address a vast number of vulnerabilities in multiple popular products, features, and roles. We invite you to join us to review and discuss the details of these security updates and patches. Microsoft...

Adobe Releases Security Updates for Multiple Products 

Adobe has released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following Adobe Security Bulletins and apply the...

Microsoft Releases April 2024 Security Updates 

Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following and apply the necessary updates: Microsoft...

April 9, 2024—KB5036932 (Monthly Rollup)

None None...

April 9, 2024—KB5036892 (OS Builds 19044.4291 and 19045.4291) - EXPIRED

None None...

April 9, 2024—KB5036969 (Monthly Rollup)

None None...

April 9, 2024—KB5036922 (Security-only update)

None None...

April 9, 2024—KB5036950 (Security-only update)

None None...

Security Updates for Microsoft Visual Studio Products (April 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - A remote code execution vulnerability exists in .NET, .NET Framework, and Visual Studio. An unauthenticated, remote attacker can exploit this to bypass...

openSUSE Security Advisory (SUSE-SU-2024:1102-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB5037022: Servicing stack update for Windows Server 2012: April 9, 2024

KB5037022: Servicing stack update for Windows Server 2012: April 9, 2024 REMINDER Windows Server 2012 reached end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for three years, renewable on an annual basis, until the final date on...

KB5037021: Servicing stack update for Windows Server 2012 R2: April 9, 2024

KB5037021: Servicing stack update for Windows Server 2012 R2: April 9, 2024 REMINDER Windows 8.1 reached end of support EOS on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recommend upgrading them to...

KLA65508 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft ODBC Driver for SQL Server can be exploited remotely to...