Security Updates & Patches Archives - Page 5 of 87

CISA adds 8 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include iOS and Chrome zero-days)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / By Frank Crast / October 30, 2022 / AnyConnect, Chrome 107, Cisco, CVE-2018-19320, CVE-2018-19321, CVE-2018-19322, CVE-2018-19323, CVE-2020-3153, CVE-2020-3433, CVE-2022-3723, CVE-2022-42827, Gigabyte, iOS

The Cybersecurity and Infrastructure Security Agency (CISA) has added 8 vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Apple iOS, Google Chrome, Cisco AnyConnect Secure, and Gigabyte vulnerabilities.

Google fixes Chrome 107 zero-day vulnerability (CVE-2022-3723) exploited in the wild

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / By Frank Crast / October 30, 2022 / Chrome, Chrome 107, CVE-2022-3723, Zero-day

Google has released Chrome 107.0.5304.87 for Mac and Linux and 107.0.5304.87/.88 for Windows with a fix for a High severity zero-day vulnerability CVE-2022-3723 exploited in the wild.

Apple releases new macOS Ventura 13, along with security updates for iOS zero-day and multiple Apple products

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / By Frank Crast / October 26, 2022 / Apple, Big Sur, CVE-2022-42827, iOS 15.7, iOS 16.1, macOS, Monterey, Safari 16.1, tvOS 16.1, Ventura 13, watchOS, Zero-day

Apple has released new macOS Ventura 13, along with security updates for Apple iOS 16.1, iOS 15.7, macOS Monterey 12.6.1, macOS Big Sur 11.7.1, Safari 16.1, tvOS 16.1, and watchOS 9.1. One zero-day iOS vulnerability was also fixed.

Google releases Chrome 107 security update with fixes for 3 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / October 26, 2022 / Chrome, Chrome 107, CVE-2022-3652, CVE-2022-3653, CVE-2022-3654

Google has released Chrome 107.0.5304.62 for Mac, 107.0.5304.68 for Linux and 107.0.5304.62/63 for Windows with fixes for 14 vulnerabilities, 3 rated High severity.

Oracle Critical Patch Update for October 2022

Database Security, Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / October 22, 2022 / CVE-2018-1285, CVE-2021-23450, CVE-2021-3918, CVE-2021-43527, CVE-2022-2068, CVE-2022-21587, CVE-2022-23305, CVE-2022-23632, CVE-2022-31813, CVE-2022-32207, CVE-2022-32215, CVE-2022-39428, Database, Enterprise Manager, Fusion, Java, Oracle

Oracle has released its Critical Patch Update for October 2022 to include 370 vulnerability fixes across multiple products.

Mozilla releases Firefox 106 with fixes for 2 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / October 22, 2022 / CVE-2022-42927, CVE-2022-42928, Firefox, Mozilla

The Mozilla Foundation has patched two High risk vulnerabilities in Firefox 106, as well as a number of other bug fixes.

Fortinet patches Critical risk vulnerability (CVE-2021-32589) in FortiOS, FortiProxy and FortiSwitchManager

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / October 16, 2022 / CVE-2021-32589, Fortinet, FortiOS, FortiProxy, FortiSwitchManager

Fortinet has patched a Critical risk vulnerability (CVE-2021-32589) in FortiOS, FortiProxy and FortiSwitchManager.

Google releases Chrome 106 (106.0.5249.119) security update with fixes for 6 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / October 16, 2022 / Chrome, Chrome 106, CVE-2022-3445, CVE-2022-3446, CVE-2022-3447, CVE-2022-3448, CVE-2022-3449, CVE-2022-3450, Safe Browsing, Skia, WebSQL

Google has released Chrome 106 (106.0.5249.119) for Windows, Mac and Linux, with fixes for six High severity vulnerabilities.

Adobe security updates for multiple products (17 Critical vulnerabilities fixed)

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / October 13, 2022 / Acrobat and Reader, Adobe, Adobe Acrobat, Adobe Commerce, Cold Fusion, Magento

Adobe has released security updates that address multiple vulnerabilities in Adobe Dimension, Adobe Cold Fusion, Adobe Acrobat and Reader, and Adobe Commerce and Magneto Open Source.

Microsoft October 2022 Security Updates addresses 84 vulnerabilities (13 rated Critical, 2 zero-days)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / By Frank Crast / October 12, 2022 / Active Directory, Azure, CVE-2022-22035, CVE-2022-24504, CVE-2022-30198, CVE-2022-33634, CVE-2022-34689, CVE-2022-37968, CVE-2022-37976, CVE-2022-37979, CVE-2022-38000, CVE-2022-38047, CVE-2022-38048, CVE-2022-41033, CVE-2022-41034, CVE-2022-41038, CVE-2022-41081, EoP, Hyper-V, Kubernetes, Office, Point-to-Point, PPT, RCE, SharePoint, Vulnerabilities

The Microsoft October 2022 Security Updates includes patches and advisories for 84 vulnerabilities, including 2 zero-day and 13 Critical severity issues. However, the ProxyNotShell vulnerabilities were not addressed.