UCSF IT Technology

Cisco has released security updates to address vulnerabilities in multiple Cisco Products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. 

Citrix has released security updates to address vulnerabilities in multiple Citrix products. A malicious administrator of a guest VM could exploit this vulnerability to cause the host to crash or become unresponsive. 

What’s Happening:We are upgrading Office 2016/2019 (32 Bit) to Office 2021 (64 Bit) on Windows computers.  Computers with Office 365 are not affected.  Why:Office 2016/2019 will reach the End-of-Support (EOS) on October 14, 2025.  Microsoft will no longer provide updates after this date.  How:

VMware has released security updates to address Critical vulnerabilities affecting the VMware Cloud Foundation. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system.

GitLab released  security updates to address a Critical vulnerability in self-managed installations of the GitLab Community Edition (CE) and Enterprise Edition (EE). An unauthenticated attacker with access to any signed saml document (by the IdP) can forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as an arbitrary user within the vulnerable system.

Google has released new versions of Chrome to address vulnerabilities in Google Chrome. For a complete description of the vulnerabilities and affected systems go to Chrome Releases.IT Security Read more about IT Security service offerings.

VMware has released security updates to address Critical vulnerabilities affecting the VMware vCenter Server platform. An attacker with network access to the server could send a specially crafted packet to execute remote code.

D-Link released security updates to address Critical vulnerabilities in the D-Link Routers. An attacker could exploit this vulnerability to execute arbitrary code or access the devices using hardcoded credentials.

Apple has released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to Apple Security Updates. IT Security Read more about IT Security service offerings.