Content Modification: Updates for Kev Content published 2024-09-16 (10)

Total New Fixlets: 8
Total Updated Fixlets: 1711
Total Fixlets in Site: 2577
Total CVEs Covered: 743
Release Date: 2024-09-16

Updated Fixlets (most updates are minor data additions done by CISA that are refected here) :

31670    Microsoft Exchange Server Information Disclosure Vulnerability - Exchange Server 2016 
7100    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability - Windows Server 2019 
31680    Microsoft Exchange Server Information Disclosure Vulnerability - Exchange Server 2019 
7110    Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability - Windows Server 2019 
31690    Microsoft Exchange Server Information Disclosure Vulnerability - Exchange Server 2013 
7120    Microsoft Windows Event Tracing Privilege Escalation Vulnerability - Windows Server 2019 
7130    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability - Windows Server 2019 
31710    Linux Kernel Heap-Based Buffer Overflow Vulnerability - Ubuntu 
7140    Microsoft Task Scheduler Privilege Escalation Vulnerability - Windows Server 2019 
31720    Linux Kernel Heap-Based Buffer Overflow Vulnerability - Debian 
23530    Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability - Microsoft BizTalk Server 
7150    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability - Windows Server 2019 
15350    Oracle Fusion Middleware Unspecified Vulnerability - Any Operating System 
7160    Microsoft Windows Privilege Escalation Vulnerability - Windows Server 2019 
23550    Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability - Windows Server 2008 R2 
7190    Microsoft Win32k Privilege Escalation Vulnerability - Windows Server 2019 
7200    Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability - Windows Server 2019 
7210    Microsoft Windows SMB Information Disclosure Vulnerability - Windows Server 2019 
7220    Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability - Windows Server 2019 
15420    Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability - Any Version of Windows 
7230    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability - Windows Server 2019 
31810    Linux Kernel Heap-Based Buffer Overflow Vulnerability - RHEL 
15430    Adobe Reader and Acrobat Memory Corruption Vulnerability - Any Version of Windows 
7240    Microsoft Win32k Privilege Escalation Vulnerability - Windows Server 2019 
15440    Adobe Acrobat and Reader Unspecified Vulnerability - Any Version of Windows 
7250    Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability - Windows Server 2019 
31830    Linux Kernel Race Condition Vulnerability - Oracle Linux 
15450    Adobe Acrobat and Reader Use-After-Free Vulnerability - Any Version of Windows 
7260    Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability - Windows Server 2019 
31840    Linux Kernel Privilege Escalation Vulnerability - Oracle Linux 
7270    Microsoft Update Notification Manager Privilege Escalation Vulnerability - Windows Server 2019 
7280    Microsoft Windows Print Spooler Privilege Escalation Vulnerability - Windows Server 2019 
31860    Linux Kernel Improper Input Validation Vulnerability - Oracle Linux 
15480    Adobe Flash Player Arbitrary Code Execution Vulnerability - Any Version of Windows 
7290    Microsoft Windows Installer Privilege Escalation Vulnerability - Windows Server 2019 
31870    Red Hat Polkit Out-of-Bounds Read and Write Vulnerability - Oracle Linux 
15490    Adobe Flash Player Use-After-Free Vulnerability - Any Version of Windows 
7300    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability - Windows Server 2019 
31880    Red Hat Polkit Incorrect Authorization Vulnerability - Oracle Linux 
7310    Microsoft Windows User Profile Service Privilege Escalation Vulnerability - Windows Server 2019 
31890    Linux Kernel Heap-Based Buffer Overflow Vulnerability - Oracle Linux 
15510    Mozilla Firefox Use-After-Free Vulnerability - Any Version of Windows 
7320    Microsoft Windows NTFS Privilege Escalation Vulnerability - Windows Server 2019 
31900    Linux Kernel Integer Overflow Vulnerability - Oracle Linux 
15520    Oracle VirtualBox Insufficient Input Validation Vulnerability - Any Version of Windows 
7330    Microsoft Windows Privilege Escalation Vulnerability - Windows Server 2019 
31910    Linux Kernel Use-After-Free Vulnerability - Oracle Linux 
15530    Adobe Flash Player Use-After-Free Vulnerability - Any Version of Windows 
7340    Microsoft Windows Privilege Escalation Vulnerability - Windows Server 2019 
31920    Sudo Heap-Based Buffer Overflow Vulnerability - Oracle Linux 
15540    Adobe ColdFusion Authentication Bypass Vulnerability - Any Version of Windows 
7350    Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability - Windows Server 2019 
31930    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability - Oracle Linux 
7360    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability - Windows Server 2019 
31940    Linux Kernel Use-After-Free Vulnerability - Oracle Linux 
7370    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability - Windows Server 2019 
31950    Linux Kernel Privilege Escalation Vulnerability - Oracle Linux 
23760    Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability - Any Version of Windows 
15570    Adobe Flash Player and AIR Use-After-Free Vulnerability - Any Version of Windows 
7380    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability - Windows Server 2019 
31960    Linux Kernel Race Condition Vulnerability - Oracle Linux 
15580    Adobe Flash Player Remote Code Execution Vulnerability - Any Version of Windows 
7390    Microsoft Windows CLFS Driver Privilege Escalation Vulnerability - Windows Server 2019 
31970    Linux Kernel Privilege Escalation Vulnerability - Oracle Linux 
7400    Microsoft Windows Privilege Escalation Vulnerability - Windows Server 2019 
7410    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability - Windows Server 2019 
31990    Linux Kernel Use-After-Free Vulnerability - Oracle Linux 
7420    Microsoft Windows Update Medic Service Privilege Escalation Vulnerability - Windows Server 2019 
32000    Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability - Windows Server 2008 R2 
23810    Trend Micro Multiple Products Improper Input Validation Vulnerability - Any Version of Windows 
7430    Microsoft Windows Graphic Component Privilege Escalation Vulnerability - Windows Server 2019 
15630    Adobe Reader and Acrobat Memory Corruption Vulnerability - Any Version of Windows 
32020    Microsoft Project Remote Code Execution Vulnerability - Project 2016 
23830    Microsoft Windows AppX Installer Spoofing Vulnerability - Windows 10 
15640    Apache CouchDB Insecure Default Initialization of Resource Vulnerability - Any Version of Windows 
7450    Microsoft Windows Kernel Privilege Escalation Vulnerability - Windows Server 2019 
32030    Debian-specific Redis Server Lua Sandbox Escape Vulnerability - Ubuntu 
7460    Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability - Windows Server 2019 
32040    Debian-specific Redis Server Lua Sandbox Escape Vulnerability - Debian 
7470    Microsoft Netlogon Privilege Escalation Vulnerability - Windows Server 2019 
23860    PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability - Any Operating System 
15670    Oracle JRE Sandbox Bypass Vulnerability - Any Version of Windows 
7480    Microsoft Windows Kernel Privilege Escalation Vulnerability - Windows Server 2019 
7490    Microsoft Windows Kernel Privilege Escalation Vulnerability - Windows Server 2019 
7510    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability - Windows Server 2019 
15710    Veeam Backup & Replication Remote Code Execution Vulnerability - Any Version of Windows 
7520    Microsoft Win32k Privilege Escalation Vulnerability - Windows Server 2019 
7530    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability - Windows Server 2019 
23920    WebKitGTK Memory Corruption Vulnerability - Any Version of Windows 
15730    Adobe Flash Player Unspecified Vulnerability - Any Version of Windows 
7540    Microsoft Windows Win32k Privilege Escalation Vulnerability - Windows Server 2019 
23930    Apple Multiple Products Type Confusion Vulnerability - Any Version of Windows 
7550    Microsoft Windows Print Spooler Privilege Escalation Vulnerability - Windows Server 2019 
23940    Microsoft Office Outlook Privilege Escalation Vulnerability - Any Version of Windows 
15750    Mozilla Firefox Security Feature Bypass Vulnerability - Any Version of Windows 
7560    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability - Windows Server 2019 
7570    Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability - Windows Server 2019 
15770    TIBCO JasperReports Server Information Disclosure Vulnerability - Any Version of Windows 
7580    Microsoft Windows User Profile Service Privilege Escalation Vulnerability - Windows Server 2019 
23970    WebKitGTK Memory Corruption Vulnerability - Any Version of Linux 
7590    Microsoft GDI Remote Code Execution Vulnerability - Windows Server 2019 
7600    Microsoft Internet Explorer Remote Code Execution Vulnerability - Windows Server 2019 
15800    Adobe Acrobat and Reader Double Free Vulnerability - Any Version of Windows 
7610    Microsoft Win32k Privilege Escalation Vulnerability - Windows Server 2019 
7620    Microsoft Defender SmartScreen Security Feature Bypass Vulnerability - Windows Server 2016 
15820    Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability - Any Version of Windows 
15830    Adobe Acrobat and Reader Universal 3D Memory Corruption Vulnerability - Any Version of Windows 
7640    Microsoft Windows Print Spooler Remote Code Execution Vulnerability - Windows Server 2016 
7670    Microsoft Internet Explorer Information Disclosure Vulnerability - Windows Server 2016 
7680    Microsoft Internet Explorer Type Confusion Vulnerability - Windows Server 2016 
7690    Microsoft Windows CryptoAPI Spoofing Vulnerability - Windows Server 2016 
15890    Mozilla Firefox Information Disclosure Vulnerability - Any Version of Windows 
7700    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability - Windows Server 2016 
7710    Microsoft Windows Kernel Privilege Escalation Vulnerability - Windows Server 2016 
15910    Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability - Any Version of Windows 
7720    Microsoft Windows Scripting Languages Remote Code Execution Vulnerability - Windows Server 2016 
24110    WebKitGTK Memory Corruption Vulnerability - Any Version of MacOS 
7730    Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability - Windows Server 2016 
15930    Microsoft Internet Explorer Memory Corruption Vulnerability - Any Version of Windows 
7750    Microsoft Internet Explorer Remote Code Execution Vulnerability - Windows Server 2016 
24140    Microsoft Win32k Privilege Escalation Vulnerability - Windows 10 
7760    Microsoft Windows Kernel Privilege Escalation Vulnerability - Windows Server 2016 
24150    Microsoft Win32k Privilege Escalation Vulnerability - Windows Server 2008 SP2 
7770    Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability - Windows Server 2016 
7780    Microsoft Windows Installer Privilege Escalation Vulnerability - Windows Server 2016 
24170    Microsoft Win32k Privilege Escalation Vulnerability - Windows Server 2016 
7790    Microsoft MSHTML Remote Code Execution Vulnerability - Windows Server 2016 
24180    Microsoft Win32k Privilege Escalation Vulnerability - Windows Server 2012 R2 
15990    Adobe ColdFusion Directory Traversal Vulnerability - Any Version of Windows 
7800    Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability - Windows Server 2016 
24190    Microsoft Win32k Privilege Escalation Vulnerability - Windows Server 2012 
7810    Microsoft Windows Scripting Engine Memory Corruption Vulnerability - Windows Server 2016 
24200    Microsoft Office Memory Corruption Vulnerability - Office 
16010    Adobe Reader and Acrobat Input Validation Vulnerability - Any Version of Windows 
7820    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability - Windows Server 2016 
24210    Microsoft Office Outlook Security Feature Bypass Vulnerability - Office 
7830    Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability - Windows Server 2016 
24220    Microsoft Office Security Feature Bypass Vulnerability - Office 
7840    Microsoft Windows User Profile Service Privilege Escalation Vulnerability - Windows Server 2016 
24230    Microsoft Office Malformed EPS File Vulnerability - Office 
7850    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability - Windows Server 2016 
24240    Microsoft Office Memory Corruption Vulnerability - Office 
24250    Microsoft Office Remote Code Execution Vulnerability - Office 
7870    Microsoft Windows LSA Spoofing Vulnerability - Windows Server 2016 
16070    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability - Any Version of Windows 
7880    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability - Windows Server 2016 
24270    Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability - Office 
24280    Microsoft Office Buffer Overflow Vulnerability - Office 
7900    Microsoft Windows Print Spooler Remote Code Execution Vulnerability - Windows Server 2016 
24290    Microsoft Office Use-After-Free Vulnerability - Office 
16100    Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability - Any Version of Windows 
7910    Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability - Windows Server 2016 
24300    Microsoft Office Buffer Overflow Vulnerability - Office 
16110    Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability - Any Version of Windows 
7920    Microsoft Windows DNS Server Remote Code Execution Vulnerability - Windows Server 2016 
24310    Microsoft Excel Security Feature Bypass - Office 
7930    Microsoft Edge and Internet Explorer Type Confusion Vulnerability - Windows Server 2016 
24320    Microsoft Word Remote Code Execution Vulnerability - Office 
16130    Oracle JRE Unspecified Vulnerability - Any Version of Windows 
7940    Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability - Windows Server 2016 
24330    Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability - Office 
7950    Microsoft SMBv1 Remote Code Execution Vulnerability - Windows Server 2016 
16150    Oracle Java SE Unspecified Vulnerability - Any Version of Windows 
7960    Microsoft Internet Explorer Privilege Escalation Vulnerability - Windows Server 2016 
24350    Microsoft Office and WordPad Remote Code Execution Vulnerability - Office 
16160    Grafana Authentication Bypass Vulnerability - Any Version of Windows 
7970    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability - Windows Server 2016 
24370    Microsoft Office Object Record Corruption Vulnerability - Office 
7990    Microsoft Windows SMBv1 Information Disclosure Vulnerability - Windows Server 2016 
24380    Microsoft Excel Featheader Record Memory Corruption Vulnerability - Office 
16190    PHP-CGI Query String Parameter Vulnerability - Any Version of Windows 
8000    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability - Windows Server 2016 
24390    Microsoft Office Memory Corruption Vulnerability - Office 
8010    Microsoft Win32k Privilege Escalation Vulnerability - Windows Server 2016 
16210    Adobe ColdFusion Unrestricted File Upload Vulnerability - Any Version of Windows 
16220    Adobe Flash Player Arbitrary Code Execution Vulnerability - Any Version of Windows 
8030    Microsoft Windows Print Spooler Privilege Escalation Vulnerability - Windows Server 2016 
24420    Microsoft PowerPoint Memory Corruption Vulnerability - Office 
16230    Adobe Reader Buffer Overflow Vulnerability - Any Version of Windows 
8040    Microsoft SMBv1 Server Remote Code Execution Vulnerability - Windows Server 2016 
24430    Microsoft Office Stack-based Buffer Overflow Vulnerability - Office 
8050    Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability - Windows Server 2016 
24440    Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability - Office 
8060    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability - Windows Server 2016 
24450    Microsoft Office Memory Corruption Vulnerability - Office 
16260    Adobe Acrobat and Reader Use-After-Free Vulnerability - Any Version of Windows 
8080    Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability - Windows Server 2016 
24470    Microsoft Office Remote Code Execution Vulnerability - Office 
8090    Microsoft Win32k Privilege Escalation Vulnerability - Windows Server 2016 
24480    Microsoft Office Memory Corruption Vulnerability - Word 
8100    Microsoft Windows Spoofing Vulnerability - Windows Server 2016 
24490    Microsoft Word Memory Corruption Vulnerability - Word 
16300    Adobe Flash Player Use-After-Free Vulnerability - Any Version of Windows 
8110    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability - Windows Server 2016 
24500    Microsoft Office Memory Corruption Vulnerability - Word 
8120    Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability - Windows Server 2016 
24510    Microsoft PowerPoint Memory Corruption Vulnerability - Word 
8130    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability - Windows Server 2016 
24520    Microsoft Office Memory Corruption Vulnerability - Word 
8140    Microsoft Task Scheduler Privilege Escalation Vulnerability - Windows Server 2016 
16340    Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability - Any Version of Windows 
8150    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability - Windows Server 2016 
24540    Microsoft Office Remote Code Execution Vulnerability - Word 
16350    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability - Any Version of Windows 
8160    Microsoft Windows Privilege Escalation Vulnerability - Windows Server 2016 
16360    Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability - Any Version of Windows 
8170    Microsoft Windows Kernel Privilege Escalation Vulnerability - Windows Server 2016 
8180    Microsoft .NET Framework Remote Code Execution Vulnerability - Windows Server 2016 
8190    Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability - Windows Server 2016

This topic was automatically closed after 30 days. New replies are no longer allowed.