Monthly Patches are out for Microsoft (Exploit) and Adobe. New Alerts for ISC, Intel, HPE, F5, Google Chrome, and Linux. The Node.js patch publication was pushed off until later today.
Microsoft Exploit
Microsoft Monthly Patches include 80 patches, 5 rated Critical and 2 being exploited. Highest CVSSv3 score of 9.8
More info. And here.
Windows SmartScreen contains a security feature bypass vulnerability rated Moderate, CVSSv3 score of 7.6. Currently exploited.
More info.
Internet Shortcut Files contains a security feature bypass vulnerability rated Important, CVSSv3 score of 8.1. Currently exploited.
More info.
Microsoft Exchange Server contains an elevation of privilege vulnerability that can be exploited by a remote attacker. Rated Critical. CVSSv3 score of 9.8
More info.
Microsoft Outlook contains a RCE vulnerability rated Critical. CVSSv3 score of 9.8
More info.
Adobe Monthly Patches include updates for Commerce, Substance 3D Painter, Acrobat and Reader, FrameMaker Publishing Server, Audition, and Substance 3D Designer. Highest CVSSv3 score of 9.8
More info.
Seven vulnerabilities hae been patched in BIND. Highest CVSSv3 score of 7.5.
More info.
Intel has published 34 bulletins for their products. Highest CVSSv3 score of 8.8
More info.
Buffer underflow in some Intel PCM software allows a remote attacker to cause a DoS. CVSSv3 score of 7.5
More info.
Insufficiently protected credentials in some Intel Server Product OpenBMC firmware allows a remote attacker to enable information disclosure. CVSSv3 score of 5.3
More info.
security vulnerabilities have been identified in certain HPE ProLiant Servers using AMD EPYC Processors. These vulnerabilities are remotely exploitable via integer underflow, buffer overflow, out of bounds read, infinite loop, predictable TCP initial sequence numbers and weak pseudorandom number generator. Highest CVSSv3 score of 8.3
More info.
F5 has published 19 bulletins for their products. Several allow a remote attacker to achieve DoS in BIG-IP products.
More info.
Google has updated Chrome for Desktop to fix 1 security vulnerability.
More info.
Ubuntu has updated the kernel. More info.
Comments