Zoom Client for Meetings < 5.5.4 Vulnerability (ZSB-21016)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.5.4. It is, therefore, affected by a vulnerability as referenced in the ZSB-21016 advisory. - The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files...

Vulnerabilities fixed in Lansweeper

Vulnerabilities have been fixed in Lansweeper. The vulnerabilities allow a malicious party to access sensitive data and to execute arbitrary code execute arbitrary code under administrator/root privileges. The vulnerabilities marked CVE-2022-32573 and CVE-2022-29517 are exploited by sending a rog...

Zoom Client for Meetings 5.10.6 < 5.12.0 Vulnerability (ZSB-22023)

The version of Zoom Client for Meetings installed on the remote host is between 5.10.6 and 5.12.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-22023 advisory. - Zoom Client for Meetings for macOS Standard and for IT Admin starting with 5.10.6 and prior to 5.12.0 contain...

Zoom Client for Meetings < 5.1.0 Vulnerability (ZSB-21015)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-21015 advisory. - In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a...

Zoom Client for Meetings < 5.6.3 Vulnerability (ZSB-22002)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.6.3. It is, therefore, affected by a vulnerability as referenced in the ZSB-22002 advisory. - The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions...

Zoom Client for Meetings < 5.3.2 Vulnerability (ZSB-21004)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.3.2. It is, therefore, affected by a vulnerability as referenced in the ZSB-21004 advisory. - A user-writable directory created during the installation of the Zoom Client for Meetings for Windows version prior to...

Zoom Client for Meetings < 5.9.6 Vulnerability (ZSB-22003)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.9.6. It is, therefore, affected by a vulnerability as referenced in the ZSB-22003 advisory. - The Zoom Client for Meetings for macOS Standard and for IT Admin prior to version 5.9.6 failed to properly check the...

Zoom Client for Meetings 4.1.27507.0627 < 4.4.52595.0425 Vulnerability (ZSB-19003)

The version of Zoom Client for Meetings installed on the remote host is between 4.1.27507.0627 and 4.4.52595.0425. It is, therefore, affected by a vulnerability as referenced in the ZSB-19003 advisory. - A vulnerability in the Zoom macOS client could allow an attacker to download malicious softwa...

December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More

Tech giant Microsoft released its last set of monthly security updates for 2022 with fixes for 49 vulnerabilities across its software products. Of the 49 bugs, six are rated Critical, 40 are rated Important, and three are rated Moderate in severity. The updates are in addition to 24 vulnerabiliti...

OracleVM 3.4 : kernel-uek (OVMSA-2022-0032)

The remote OracleVM system is missing necessary patches to address security updates: - A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their...

Security Updates for Microsoft Office Products (Dec 2022) (macOS)

The Microsoft Office product installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Office Graphics Remote Code Execution Vulnerability CVE-2022-44692 - An attacker could appear as a trusted user when they should not be. This...

The December 2022 Patch Tuesday Security Update Review

Welcome to the final second Tuesday of the year. As expected, Microsoft and Adobe have released their latest security updates and fixes. Take a break from your holiday preparations and join us as we review the details of the latest security patches. Microsoft Patches for December 2022 In this...

December 13, 2022—KB5021291 (Monthly Rollup)

None None...

December 13, 2022—KB5021285 (Monthly Rollup)

None None...

Guidance on Microsoft Signed Drivers Being Used Maliciously

Executive Summary: Microsoft was recently informed that drivers certified by Microsoft’s Windows Hardware Developer Program were being used maliciously in post-exploitation activity. Microsoft has completed its investigation and determined that the activity was limited to the abuse of several...

December 13, 2022—KB5021237 (OS Build 17763.3770) - EXPIRED

None None...

PT-2022-5999 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue exists due to inadequate protection of the web page structure in Adobe Experience Manager, allowing a remote attacker to perform cross-site scripting attacks using a...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security updates page for the following products and app...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in the various Developer Tools. The vulnerabilities allow a malicious party to execute attacks that result in the following categories of damage: Circumvention of security measure. Remote code execution User rights Increased user privileges The vulnerability in...

About the security content of iOS 16.2 and iPadOS 16.2

About the security content of iOS 16.2 and iPadOS 16.2 This document describes the security content of iOS 16.2 and iPadOS 16.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...