UCSF IT Technology

Zyxel has released a security advisory to address a vulnerability in Zyxel NAS products. An attacker could exploit this vulnerability to perform a remote code execution.

Google released a Chrome Version 105.0.5195.102 for Windows, Mac and Linux to address a High actively exploited vulnerability in Chrome. Insufficient data validation issue impacting Mojo, a Chrome component consisting of a collection of runtime libraries facilitating messaging across inter- and intra-process boundaries.

Ubuntu released multiple security updates in August for various Ubuntu products.

Red Hat released multiple security updates in August for various Red Hat products.

Suse released multiple security updates in August for various Suse products. 

Google Chrome bug lets sites silently overwrite system clipboard content. The clipboard poisoning attack is said to have been accidentally introduced in Chrome version 104. A "major" security issue could allow malicious web pages to automatically overwrite clipboard content without requiring any user consent or interaction by simply visiting them. Threat actors could overwrite the clipboard with a link to specially crafted websites, leading victims to download dangerous software.

Mozilla has released security update to address a vulnerability in Thunderbird. An attacker could exploit these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to Thunderbird 102.2.1. IT Security Read more about IT Security service offerings.

Apple has released security updates to address vulnerabilities in multiple Apple products.  Exploitation of this vulnerability could allow an attacker to take control of the affected device.

H-ISAC reported that a Vulnerability in Linux Kernel was Weaponized.  An attacker could exploit this vulnerability to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free. For a complete description of the vulnerabilities and affected systems go to CVE-2022-32250 Detail. IT Security

SQLite Consortium released security updates to address a vulnerability in SQlite. An issue was found in fts5UnicodeTokenize() in ext/fts5/fts5_tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode "control-characters" (class Cc), was treating embedded nul characters as tokens.