March 12, 2024—KB5035853 (OS Builds 22621.3296 and 22631.3296)

None None...

March 12, 2024—KB5035888 (Monthly Rollup)

None None...

March 12, 2024—KB5035855 (OS Build 14393.6796) - EXPIRED

None None...

Vulnerability fixed in Microsoft Exchange

Microsoft has fixed a vulnerability in Exchange Server. A malicious party can exploit the vulnerability to execute arbitrary code execute with privileges of the victim, potentially gaining access gain access to sensitive data in the victim's context. Successful exploitation requires the malicious...

KB5035969: Servicing stack update for Windows Server 2012: March 12, 2024

KB5035969: Servicing stack update for Windows Server 2012: March 12, 2024 REMINDER Windows Server 2012 reached end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for three years, renewable on an annual basis, until the final date on...

Security Updates for Microsoft Dynamics 365 (on-premises) (March 2024)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by a cross-site scripting vulnerability. An attacker can spoof a session to perform actions with the privileges of another user. Note that Nessus has not tested for these issues but has instead relied...

KLA65127 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Office can be...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in various products such as. Cerberus, Ruggedcom, SCALANCE, Sentron, SIMATIC, Sinema, Sinteso, Siveillance and Solid Edge. The vulnerabilities allow a malicious party potentially able to launch attacks that could lead to the following categories of damage:...

KB5035962: Servicing stack update for Windows 10, version 1607 and Server 2016: March 12, 2024

None None...

KB5035968: Servicing stack update for Windows Server 2012 R2: March 12, 2024

KB5035968: Servicing stack update for Windows Server 2012 R2: March 12, 2024 REMINDER Windows 8.1 reached end of support EOS on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recommend upgrading them t...

Security Updates for Microsoft Visual Studio Products (March 2024)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple denial of service vulnerabilities. An attacker can exploit these issues to cause the affected component to deny system or application services. Note that Nessus has not tested for these issue...

Fedora 38 : qpdf (2024-daa7df59d6)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-daa7df59d6 advisory. 2267205 - CVE-2024-24246 qpdf - Heap Buffer Overflow vulnerability in qpdf fedora-all Tenable has extracted the preceding description block directly...

Apple Released Security Updates for Multiple Products

Apple released security updates to address vulnerabilities in Safari, macOS, watchOS, tvOS, and visionOS. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply t...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 13

Package name: xms10.14.0.11306.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.11222.bin, xms10.14.0.11121.bin, xms10.14.0.11013.bin, xms10.14.0.10942.bin, xms10.14.0.10813.bin, xms10.14.0.10742.bin, xms10.14.0.10628.bin, xms10.14.0.10521.bin,...

Vulnerabilities fixed in Apple macOS

Apple has fixed vulnerabilities in macOS. A malicious party could exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Circumvention of security measure. Remote code execution Administrator/Root rights Remote code execution User rights Access to...

Apple Releases Security Updates for iOS and iPadOS

Apple released security updates to address vulnerabilities in iOS and iPadOS. A cyber threat actor could exploit one of these vulnerabilities to obtain sensitive information. CISA encourages users and administrators to review the following security releases and apply the necessary updates: iOS 17...

Cisco Releases Security Updates for Secure Client

Cisco released security updates to address vulnerabilities in Cisco Secure Client and Secure Client for Linux. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the following security releases...

SUSE-SU-2024:0804-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - CVE-2024-20952: Fixed RSA padding issue and timing side-channel attack against TLS 8317547 bsc1218911. - CVE-2024-20921: Fixed range check loop optimization issue 8314307 bsc1218905. - CVE-2024-20926: Fixed rbitrary Java code executio...

About the security content of macOS Monterey 12.7.4

About the security content of macOS Monterey 12.7.4 This document describes the security content of macOS Monterey 12.7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of tvOS 17.4

About the security content of tvOS 17.4 This document describes the security content of tvOS 17.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...