UCSF IT Technology

Researchers have devised an attack that can compromise iOS and macOS devices.  An attacker could exploit these vulnerabilities to divulge passwords, Gmail message content, and other secrets.

Cisco released security updates to address Critical vulnerabilities in the Cisco SD-WAN Manager.  An unauthorized attacker could exploit these vulnerabilities to access the product or perform a denial of service condition.

VMware has released security updates to address Critical Vulnerabilities in EOL vCenter Products.  A malicious user could exploit these vulnerabilities to perform remote code execution and access unauthorized data. For a complete description of the vulnerabilities and affected systems go to VMSA-2023-0023.

Mozilla released security updates to address vulnerabilities in multiple Mozilla products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to Mozilla Foundation Security Advisories. IT Security

VMware has updated a VMSA to confirm an exploit code has been published for a vulnerability in VMware vRealize. A malicious actor could exploit this vulnerability to perform remote code execution.  For a complete description of the vulnerabilities and affected systems go to  VMSA-2023-0021. IT Security

Oracle has released security updates to address vulnerabilities in Oracle WebLogic Server.  These vulnerabilities could be exploited to execute arbitrary code. For a complete description of the vulnerabilities and affected systems, go to Oracle Critical Patch Update Advisory - October 2023. IT Security

Microsoft released  security updates to address an actively exploited vulnerability in Microsoft Outlook 2016 (64-bit edition). An attacker who successfully exploited the vulnerability could run a specially crafted application with elevated privileges.

Cisco has released security updates to address vulnerabilities in Multiple Cisco Products. For a complete description of the vulnerabilities and affected systems go to Cisco Security Advisories. IT Security Read more about IT Security service offerings.

SolarWinds released security updates to address vulnerabilities in the SolarWinds Access Rights Manager.  For a complete description of the vulnerabilities and affected systems go to ARM 2023.2.1 Release Notes. IT Security