Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the following advisories and apply the necessary updates. iOS 15.7...

January 10, 2023—KB5022348 (Monthly Rollup)

None None...

April 11, 2023—KB5025285 (Monthly Rollup)

None None...

April 11, 2023—KB5025271 (Monthly Rollup)

None None...

April 11, 2023—KB5025277 (Security-only update)

None None...

April 11, 2023—KB5025272 (Security-only update)

None None...

April 11, 2023—KB5025273 (Security-only update)

None None...

April 11, 2023—KB5025221 (OS Builds 19042.2846, 19044.2846, and 19045.2846) - EXPIRED

None None...

April 11, 2023—KB5025279 (Monthly Rollup)

None None...

April 11, 2023—KB5025287 (Monthly Rollup)

None None...

KB5021123 - Description of the security update for SQL Server 2012 SP4 GDR: February 14, 2023

None None...

PT-2023-2400 · Microsoft · Office Publisher +2

Name of the Vulnerable Software and Affected Versions: Microsoft Publisher affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Description: The issue is related to insufficient input validation in...

Security Updates for Microsoft SharePoint Server 2013 (April 2023)

The Microsoft SharePoint Foundation 2013 installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid174115;...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in, among others: TIA Portal, SIPROTEC, SICAM , SCALANCE, SIMANTIC and Mendix. The vulnerabilities potentially enable a malicious party to launch attacks that could result in the following categories of damage: Denial-of-Service DoS. Remote code execution User...

Remote Desktop client for Windows Information Disclosure (April 2023)

The Windows Remote Desktop client for Windows installed on the remote host is missing security updates. It is, therefore, affected by an information disclosure vulnerability. This vulnerability could be triggered when a user connects a Windows client to a malicious server. An attacker who...

PT-2023-2527 · Fortinet · Fortinac

Name of the Vulnerable Software and Affected Versions: FortiNAC versions 9.4.1 and below FortiNAC versions 9.2.6 and below FortiNAC versions 9.1.8 and below FortiNAC versions 8.8.11 and below FortiNAC versions 8.7.6 and below Description: The issue is related to an exposure of sensitive informati...

KLA48823 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Word can be exploited remotely to execute...

Security Updates for Microsoft SharePoint Server Subscription Edition (March 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Security Updates for Microsoft Publisher Products (April 2023)

The Microsoft Publisher Products are missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but ha...

Apple Releases Updates to Address Zero-Day Flaws in iOS, iPadOS, macOS, and Safari

Apple on Friday released security updates for iOS, iPadOS, macOS, and Safari web browser to address a pair of zero-day flaws that are being exploited in the wild. The two vulnerabilities are as follows - CVE-2023-28205 - A use after free issue in WebKit that could lead to arbitrary code execution...