Security Updates for Microsoft Word Products (December 2023)

The Microsoft Word Products are missing security updates. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for this issue but has instead relied only on the...

Fedora 38 : java-17-openjdk (2023-433474a567)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-433474a567 advisory. updated to OpenJDK 17.0.9 2023-10-17 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Security Updates for Microsoft Office Products (Dec 2023) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the december-12-2023 advisory. - Microsoft Word Information Disclosure Vulnerability CVE-2023-36009 - Microsoft Outlook for Mac Spoofing Vulnerability CVE-2023-35619 Note...

Security Updates for Azure Connected Machine Agent (December 2023)

The Microsoft Azure Connected Machine Agent running on the remote host is prior to 1.37. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...

Security Updates for Microsoft Dynamics 365 (on-premises) (December 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2023-35621 - A sessio...

KB5033466: Servicing stack update for Windows Server 2008 SP2: December 12, 2023

KB5033466: Servicing stack update for Windows Server 2008 SP2: December 12, 2023 REMINDER Windows Server 2008 SP2 Extended Security Updates third and final year of ESU ended on January 10, 2023. Many customers are taking advantage of Azures commitment to security and compliance and have moved to...

About the security content of iOS 16.7.3 and iPadOS 16.7.3

About the security content of iOS 16.7.3 and iPadOS 16.7.3 This document describes the security content of iOS 16.7.3 and iPadOS 16.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of iOS 16.7.3 and iPadOS 16.7.3

About the security content of iOS 16.7.3 and iPadOS 16.7.3 This document describes the security content of iOS 16.7.3 and iPadOS 16.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

Fedora 38 : java-1.8.0-openjdk (2023-7f704380a0)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-7f704380a0 advisory. updated to jdk8u392+b08 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Ubuntu 22.04 LTS / 23.04 / 23.10 : WebKitGTK vulnerabilities (USN-6545-1)

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6545-1 advisory. - An out-of-bounds read was addressed with improved input validation. CVE-2023-42916 - A memory corruption vulnerability was addressed wi...

OracleVM 3.4 : kernel-uek (OVMSA-2023-0025)

The remote OracleVM system is missing necessary patches to address security updates: - A flaw was found in the Netfilter subsystem in the Linux kernel. The xtu32 module did not validate the fields in the xtu32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds rea...

Fedora 39 : seamonkey (2023-76db6c040e)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-76db6c040e advisory. Update to 2.53.18 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Atlassian Releases Security Advisories for Multiple Products

Atlassian has released security updates to address vulnerabilities affecting multiple Atlassian products. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply th...

Fedora 39 : webkitgtk (2023-f844a8fa64)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f844a8fa64 advisory. - An out-of-bounds read was addressed with improved input validation. CVE-2023-42916 - A memory corruption vulnerability was addressed with improved...

CLSA-2023-1701963303 kernel: Fix of 18 CVEs

net/tls: do not free tlsrec on async operation in bpfexectxverdict CVE-2023-6176 - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - mac80211: always allocate struct ieee80211elems CVE-2022-42719 - x86/sev: Check for user-space IOIO pointing to kernel space CVE-2023-46813 -...

Fedora 39 : python2.7 (2023-9954dae554)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9954dae554 advisory. Security fix for CVE-2022-48560 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 38 : python2.7 (2023-34a3a5adba)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-34a3a5adba advisory. Security fix for CVE-2022-48560 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Windows 10 gets its own extended security updates program

The day that Windows 10 machines will get their last security updates is set for October 14, 2025. So if you want to stay secure, you’d have to upgrade to a newer version. Either to Windows 11, which is not all that different, but more demanding when it comes to system requirements. Or to the...

Qualcomm Releases Details on Chip Vulnerabilities Exploited in Targeted Attacks

Chipmaker Qualcomm has released more information about three high-severity security flaws that it said came under "limited, targeted exploitation" back in October 2023. The vulnerabilities are as follows - CVE-2023-33063 CVSS score: 7.8 - Memory corruption in DSP Services during a remote call fro...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : curl vulnerabilities (USN-6535-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6535-1 advisory. Harry Sintonen discovered that curl incorrectly handled mixed case cookie domains. A remote attacker could possibly use this...