UCSF IT Technology

Zoom released security updates to address High vulnerabilities in Zoom.For a complete description of the vulnerabilities and affected systems, go to Zoom Security Bulletins.IT Security Read more about IT Security service offerings.

Microsoft released its March Security Updates to address 0-day, Critical, and other vulnerabilities in multiple Microsoft products.For a complete description of the vulnerabilities and affected systems, go to Microsoft Security Update Guide for March.IT Security Read more about IT Security service offerings.

Adobe has released security updates to address Critical and other vulnerabilities in multiple Adobe products.For a complete description of the vulnerabilities and affected systems, go to Adobe Security Bulletins.IT Security Read more about IT Security service offerings.

SAP released its March 2025 updates to address High and other vulnerabilities in multiple SAP products.For a complete description of the vulnerabilities and affected systems, go to SAP Security Patch Day – March 2025.IT Security Read more about IT Security service offerings.

Apple Released Emergency Updates to Address a Zero-Day Vulnerability in Multiple Apple Products. Attackers can exploit the vulnerability to break out of the Web Content sandbox.For a complete description of the vulnerabilities and affected systems, go to:

Experts warn of mass exploitation of Critical PHP flaw. An attacker could exploit the vulnerability to achieve remote code execution on vulnerable servers using Apache and PHP-CGI.For a complete description of the vulnerabilities and affected systems, go to: 

Elastic has released security updates to address Critical vulnerabilities in Elastic Kibana. An attacker could exploit this vulnerability to perform remote code execution.For a complete description of the vulnerabilities and affected systems, go to Kibana 8.17.3 Security Update (ESA-2025-06).IT Security Read more about IT Security service offerings.

Google released its March Android update to address Critical, 0-Day, and other vulnerabilities in Android devices. The most severe of these issues is a critical security vulnerability in the System component that could lead to remote code execution with no additional execution privileges needed. For a complete description of the vulnerabilities and affected systems, go to Android Security Bulletin March 2025.