RHEL 8 : dotnet7.0 (RHSA-2023:7256)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7256 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Security Updates for Microsoft Visual Studio Products (November 2023)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of...

RHEL 8 : dotnet8.0 (RHSA-2023:7254)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7254 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Microsoft Patch Tuesday, November 2023 Edition

Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three "zero day" vulnerabilities that Microsoft warns are already being exploited in active attacks. The zero-day threats targeting Microsoft this month...

Microsoft Releases November 2023 Security Updates

Microsoft has released updates addressing multiple vulnerabilities in Microsoft software. A cyber threat actor can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s November 2023 Security Update Guidelink is...

Fortinet Releases Security Updates for FortiClient and FortiGate

Fortinet has released security advisories addressing vulnerabilities in FortiClient and FortiGate. Cyber threat actors may exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Fortinet security advisories and...

November 14, 2023—KB5032248 (Security-only update)

None None...

November 14, 2023—KB5032250 (Security-only update)

None None...

November 14, 2023—KB5032254 (Monthly Rollup)

None None...

November 14, 2023—KB5032252 (Monthly Rollup)

None None...

Internet Explorer help

None None...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23048)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23048 advisory. - Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access...

Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23051)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23051 advisory. - Cryptographic issues with In-Meeting Chat for soZoom clients may allow a privileged user to conduct an information...

Security Updates for Microsoft Excel Products (November 2023)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-36041 - A security feature bypass...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23046)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23046 advisory. - Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a deni...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23047)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23047 advisory. - Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23050)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23050 advisory. - Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access...

Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23052)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23052 advisory. - Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information...

Security Updates for Microsoft Office Products (Nov 2023) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the november-14-2023 advisory. - Microsoft Excel Security Feature Bypass Vulnerability CVE-2023-36037 - Microsoft Excel Remote Code Execution Vulnerability CVE-2023-36041 ...

Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23049)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23049 advisory. - Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of...