Cyber Security Advisories

RSS Cyber Security Advisories – courtesy of MS-ISAC
  • A Vulnerability in Apache Products Could Allow for Remote Code Execution December 12, 2017
    A Vulnerability in Apache Products Could Allow for Remote Code Execution MS-ISAC ADVISORY NUMBER: 2017-126 DATE(S) ISSUED: 12/12/2017 OVERVIEW: A vulnerability has been identified in Apache products that could allow for remote code execution. Apache Synapse is an enterprise service bus (ESB) and mediation engine. Apache Commons is an Apache project focused on all aspects […]
  • Critical Patches Issued for Microsoft Products, December 12, 2017 December 12, 2017
    Critical Patches Issued for Microsoft Products, December 12, 2017 MS-ISAC ADVISORY NUMBER: 2017-125 DATE(S) ISSUED: 12/12/2017 OVERVIEW: Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the […]
  • Multiple Vulnerabilities in Mozilla Firefox Could Allow for Arbitrary Code Execution December 7, 2017
    Multiple Vulnerabilities in Mozilla Firefox Could Allow for Arbitrary Code Execution MS-ISAC ADVISORY NUMBER: 2017-124 DATE(S) ISSUED: 12/07/2017 OVERVIEW: Multiple vulnerabilities have been discovered in Mozilla Firefox and Firefox Extended Support Release (ESR), the most severe of which could allow for arbitrary code execution. Mozilla Firefox is a web browser used to access the Internet. […]
  • Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution December 7, 2017
    Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution MS-ISAC ADVISORY NUMBER: 2017-123 DATE(S) ISSUED: 12/07/2017 OVERVIEW: Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could result in arbitrary code execution. Google Chrome is a web browser used to access the Internet. These vulnerabilities can be exploited if […]
  • Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution December 7, 2017
    Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution MS-ISAC ADVISORY NUMBER: 2017-122 DATE(S) ISSUED: 12/07/2017 OVERVIEW: Multiple vulnerabilities have been discovered in iOS, tvOS, watchOS, High Sierra, Sierra, and El Capitan. The most severe of these vulnerabilities could allow for arbitrary code execution. iOS is a mobile operating system for mobile devices, […]
  • Multiple Vulnerabilities in Apache Struts Could Allow for Remote Code Execution December 5, 2017
    Multiple Vulnerabilities in Apache Struts Could Allow for Remote Code Execution MS-ISAC ADVISORY NUMBER: 2017-121 DATE(S) ISSUED: 12/05/2017 OVERVIEW: Multiple vulnerabilities have been identified in Apache Software Foundation Struts version 2, the most severe of which could allow for remote code execution. Apache Struts is an open source framework used for building Java web applications. […]
  • Multiple Vulnerabilities in Mozilla Thunderbird Could Allow for Arbitrary Code Execution December 5, 2017
    Multiple Vulnerabilities in Mozilla Thunderbird Could Allow for Arbitrary Code Execution MS-ISAC ADVISORY NUMBER: 2017-120 DATE(S) ISSUED: 12/05/2017 OVERVIEW: Multiple vulnerabilities have been identified in Mozilla Thunderbird, the most severe of which could allow for arbitrary code execution. Mozilla Thunderbird is an email client. Successful exploitation of the most severe of these vulnerabilities could allow […]
  • Multiple Vulnerabilities in Google Android OS Could Allow for Arbitrary Code Execution December 4, 2017
    Multiple Vulnerabilities in Google Android OS Could Allow for Arbitrary Code Execution MS-ISAC ADVISORY NUMBER: 2017-119 DATE(S) ISSUED: 12/04/2017 OVERVIEW: Multiple vulnerabilities have been discovered in Google Android operating system (OS), the most severe of which could allow for arbitrary code execution. Android is an operating system developed by Google for mobile devices, including, but […]
  • A Vulnerability in Exim Mailer Could Allow for Arbitrary Code Execution November 30, 2017
    A Vulnerability in Exim Mailer Could Allow for Arbitrary Code Execution MS-ISAC ADVISORY NUMBER: 2017-118 DATE(S) ISSUED: 11/30/2017 OVERVIEW: A vulnerability has been discovered in Exim Mailer, which could allow for arbitrary code execution. Exim Mailer is a message transfer agent on Unix systems that connects to the Internet. Successfully exploiting this vulnerability could allow […]
  • Multiple Vulnerabilities in Cisco WebEx Recording Format and Advanced Recording Format Players Could Allow for Arbitrary Code Execution November 30, 2017
    Multiple Vulnerabilities in Cisco WebEx Recording Format and Advanced Recording Format Players Could Allow for Arbitrary Code Execution MS-ISAC ADVISORY NUMBER: 2017-117 DATE(S) ISSUED: 11/30/2017 OVERVIEW: Multiple vulnerabilities has been discovered in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) and WebEx Recording Format (WRF) Players, the most severe of which could […]