UCSF IT Technology

Mandiant reported a High vulnerability in Brocade Fabric OS Software. Successful exploitation of this vulnerability can allow an attacker to perform An OS command injection. For a complete description of the vulnerabilities and affected systems go to CVE-2022-33186 Detail. IT Security Read more about IT Security service offerings.

Mandiant reported a High vulnerability in Vim. Successful exploitation of this vulnerability can allow an attacker to perform an out-of-bounds write. For a complete description of the vulnerabilities and affected systems go to CVE-2022-3520 Detail. IT Security Read more about IT Security service offerings.

VMware has released security updates to address Critical and High vulnerabilities affecting multiple VMware products. An attacker can exploit some of these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to VMware Security Advisories. IT Security

Apple has released a security update to address vulnerabilities in multiple Apple Products. An attacker can exploit some of these vulnerabilities to take control of an affected system.

Microsoft released their December Security Update to address vulnerabilities in multiple products.An attacker can exploit some of these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to December 2022 Security Update. IT Security

Mozilla released security updates to address High vulnerabilities in Thunderbird, Firefox ESR, and Firefox. An attacker could exploit these vulnerabilities to cause user confusion or conduct spoofing attacks. For a complete description of the vulnerabilities and affected systems go to Mozilla Foundation Security Advisories. IT Security

Citrix has released security updates to address a Critical actively exploited vulnerability impacting Citrix ADC and Citrix Gateway. An attacker could exploit the vulnerability to take control of an affected system.

H-ISAC reported that a vulnerability in Sysmon was weaponized. Successful exploitation of this vulnerability can allow for privilege escalation. For a complete description of the vulnerabilities and affected systems go to Microsoft Windows Sysmon Elevation of Privilege Vulnerability CVE-2022-41120. IT Security

H-ISAC reported that a vulnerability in VMWare vRealize Operations was likely weaponized. Successful exploitation of this vulnerability can allow an unauthenticated potential attacker to create a user with administrative privileges. For a complete description of the vulnerabilities and affected systems go to CVE-2022-31675 Detail. IT Security

Fortinet has released security updates to address a Critical actively exploited vulnerability in Fortinet FortiOS. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability has been exploited in the wild.