Apple Security Advisory

iOS 16.1.1 and iPadOS 16.1.1 Security Content macOS Ventura 13.0.1 Security Content

National Cyber Awareness System

CISA Releases SSVC Methodology to Prioritize Vulnerabilities Cisco Releases Security Updates for Multiple Products CISA Releases Twenty Industrial Control Systems Advisories CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite Microsoft Releases November 2022 Security Updates VMware Releases Security Updates Citrix Releases Security Updates for ADC and Gateway CISA Adds Seven Known Exploited Vulnerabilities to Catalog

Ubuntu Security Notices

USN-5724-1: Thunderbird vulnerabilities USN-5721-1: WavPack vulnerability USN-5709-2: Firefox vulnerabilities USN-5720-1: Zstandard vulnerabilities USN-5719-1: OpenJDK vulnerabilities USN-5717-1: PHP vulnerabilities USN-5718-1: pixman vulnerability USN-5714-1: LibTIFF vulnerabilities USN-5658-2: DHCP vulnerabilities USN-5716-1: SQLite vulnerability USN-5715-1: LibRaw vulnerabilities

Red Hat Security Advisory

(RHSA-2022:7434) Moderate: Logging Subsystem 5.5.4 - Red Hat OpenShift security update (RHSA-2022:7896) Moderate: Red Hat Integration Debezium 1.9.7 security update (RHSA-2022:6882) Moderate: Openshift Logging 5.3.13 security and bug fix release (RHSA-2022:7887) Important: linux-firmware security update (RHSA-2022:7885) Important: kpatch-patch security update (RHSA-2022:7822) Low: container-tools:rhel8 security, bug fix, and enhancement update (RHSA-2022:7790) Moderate: bind security update (RHSA-2022:7813) Important: mingw-zlib security update (RHSA-2022:7811) Important: mingw-expat security update (RHSA-2022:7793) Moderate: rsync security and enhancement update (RHSA-2022:7704) Moderate: webkit2gtk3 security and bug fix update (RHSA-2022:7730) Moderate: libldb security, bug fix, and enhancement update (RHSA-2022:7720) Moderate: e2fsprogs security and bug fix update (RHSA-2022:7745) Moderate: freetype security update (RHSA-2022:7692) Moderate: xmlrpc-c security update (RHSA-2022:7700) Moderate: gdisk security update (RHSA-2022:7683) Moderate: kernel security, bug fix, and enhancement update (RHSA-2022:7472) Low: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update (RHSA-2022:7639) Moderate: openblas security update (RHSA-2022:7648) Moderate: grafana-pcp security update (RHSA-2022:7640) Moderate: mutt security update (RHSA-2022:7643) Important: bind9.16 security update (RHSA-2022:7618) Moderate: gstreamer1-plugins-good security update (RHSA-2022:7524) Moderate: yajl security update (RHSA-2022:7444) Moderate: kernel-rt security and bug fix update (RHSA-2022:7583) Moderate: xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update (RHSA-2022:7633) Moderate: dnsmasq security and bug fix update (RHSA-2022:7514) Moderate: fribidi security update (RHSA-2022:7592) Moderate: python39:3.9 and python39-devel:3.9 security update (RHSA-2022:7594) Moderate: poppler security and bug fix update (RHSA-2022:7623) Moderate: dovecot security update (RHSA-2022:7457) Moderate: container-tools:rhel8 security, bug fix, and enhancement update (RHSA-2022:7529) Moderate: container-tools:3.0 security update (RHSA-2022:7541) Low: redis:6 security, bug fix, and enhancement update (RHSA-2022:7622) Moderate: unbound security, bug fix, and enhancement update (RHSA-2022:7461) Moderate: libreoffice security update (RHSA-2022:7482) Moderate: qt5 security, bug fix, and enhancement update (RHSA-2022:7469) Moderate: container-tools:4.0 security and bug fix update (RHSA-2022:7585) Moderate: libtiff security update (RHSA-2022:7558) Low: wavpack security update (RHSA-2022:7447) Moderate: pcs security, bug fix, and enhancement update (RHSA-2022:7470) Important: pki-core:10.6 and pki-deps:10.6 security and bug fix update (RHSA-2022:7464) Moderate: protobuf security update (RHSA-2022:7581) Moderate: python38:3.8 and python38-devel:3.8 security update

Cisco Security Advisory

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability Multiple Cisco Products Snort SMB2 Detection Engine Policy Bypass and Denial of Service Vulnerabilities Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability Cisco Firepower Threat Defense Software SIP and Snort 3 Detection Engine Denial of Service Vulnerability Cisco Firepower Threat Defense Software SSL Decryption Policy Bleichenbacher Attack Vulnerability Cisco Firepower Threat Defense Software Privilege Escalation Vulnerability Cisco Firepower Threat Defense Software Generic Routing Encapsulation Denial of Service Vulnerability Cisco Firepower Threat Defense Software and Cisco FXOS Software Command Injection Vulnerability Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability Cisco Firepower Management Center Software XML External Entity Injection Vulnerability Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities Cisco Firepower Management Center Software Information Disclosure Vulnerability Cisco Firepower Management Center and Firepower Threat Defense Software SSH Denial of Service Vulnerability Cisco Firepower Management Center Software Command Injection Vulnerabilities Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability

Microsoft Security

Chromium: CVE-2022-3890 Heap buffer overflow in Crashpad Chromium: CVE-2022-3889 Type Confusion in V8 Chromium: CVE-2022-3888 Use after free in WebCodecs Chromium: CVE-2022-3887 Use after free in Web Workers Chromium: CVE-2022-3886 Use after free in Speech Recognition Chromium: CVE-2022-3885 Use after free in V8 AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability Azure CycleCloud Elevation of Privilege Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Network Address Translation (NAT) Denial of Service Vulnerability Windows Overlay Filter Elevation of Privilege Vulnerability Windows Overlay Filter Elevation of Privilege Vulnerability .NET Framework Information Disclosure Vulnerability GitHub: CVE-2022-39327 Improper Control of Generation of Code ('Code Injection') in Azure CLI Microsoft Windows Sysmon Elevation of Privilege Vulnerability Microsoft SharePoint Server Spoofing Vulnerability Microsoft Exchange Server Spoofing Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Spoofing Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability Windows Scripting Languages Remote Code Execution Vulnerability Windows Hyper-V Denial of Service Vulnerability Windows Kerberos Elevation of Privilege Vulnerability Netlogon RPC Elevation of Privilege Vulnerability Windows Group Policy Elevation of Privilege Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Group Policy Elevation of Privilege Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability GitHub: CVE-2022-39253 Local clone optimization dereferences symbolic links by default Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability Windows Mark of the Web Security Feature Bypass Vulnerability Windows Win32k Elevation of Privilege Vulnerability Windows Mark of the Web Security Feature Bypass Vulnerability Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Windows Extensible File Allocation Table Elevation of Privilege Vulnerability Azure RTOS GUIX Studio Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability Windows Digital Media Receiver Elevation of Privilege Vulnerability Windows Kerberos Denial of Service Vulnerability Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability Windows Human Interface Device Information Disclosure Vulnerability Windows GDI+ Information Disclosure Vulnerability Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability BitLocker Security Feature Bypass Vulnerability Windows HTTP.sys Elevation of Privilege Vulnerability Microsoft Word Information Disclosure Vulnerability Microsoft Word Information Disclosure Vulnerability Microsoft Word Remote Code Execution Vulnerability Microsoft Excel Security Feature Bypass Vulnerability Microsoft Excel Information Disclosure Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability Windows Win32k Elevation of Privilege Vulnerability Microsoft Business Central Information Disclosure Vulnerability Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows Bind Filter Driver Elevation of Privilege Vulnerability Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability Windows Scripting Languages Remote Code Execution Vulnerability Visual Studio Remote Code Execution Vulnerability Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Google Security Advisories

Chrome Releases: Stable Channel Update for Desktop Chrome Releases: Stable Channel Update for Desktop Android Security Bulletin—November 2022 | Android Open Source Project

Github Security Advisories

[GHSA-gmpq-xrxj-xh8m] Arches vulnerable to execution of arbitrary SQL [GHSA-vp35-85q5-9f25] Container build can leak any path on the host into the container [GHSA-99r3-xmmq-7q7g] eZ Platform users with the Company admin role can assign any role to any user [GHSA-8h83-chh2-fchp] eZ Platform users with the Company admin role can assign any role to any user [GHSA-446q-xxg5-3vhh] eZ Platform users with the Company admin role can assign any role to any user [GHSA-pcpm-vc4v-cmvx] eZ Platform users with the Company admin role can assign any role to any user [GHSA-g6jc-xrc3-4wwq] Ibexa DXP users with the Company admin role can assign any role to any user [GHSA-394j-x37r-2q27] Ibexa DXP users with the Company admin role can assign any role to any user [GHSA-7644-cxp8-h23r] ibexa/admin-ui vulnerable to Cross-site Scripting in content type name/shortname [GHSA-c7pc-pgf6-mfh5] ezplatform-graphql GraphQL queries can expose password hashes [GHSA-58h5-h554-429q] ezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS) [GHSA-3p7g-wrgg-wq45] GraphQL queries can expose password hashes [GHSA-rc39-g977-687w] Use of unclaimed s3 bucket in tests and examples [GHSA-wh6w-3828-g9qf] Wasmtime may have data leakage between instances in the pooling allocator [GHSA-44mr-8vmm-wjhg] Wasmtime out of bounds read/write with zero-memory-pages configuration [GHSA-98pf-gfh3-x3mp] Read the Docs vulnerable to Cross-Site Scripting (XSS) [GHSA-3qmc-2r76-4rqp] Redwood is vulnerable to account takeover via dbAuth "forgot-password" [GHSA-93vw-8fm5-p2jf] Parse Server is vulnerable to Prototype Pollution via Cloud Code Webhooks [GHSA-p2jh-44qj-pf2v] Exfiltration of hashed SMB credentials on Windows via file:// redirect [GHSA-6c6p-h79f-g6p4] Istio may allow identity impersonation if user has localhost access [GHSA-xprv-wvh7-qqqx] Parse Server vulnerable to Prototype Pollution via Cloud Code Webhooks or Cloud Code Triggers [GHSA-5m7g-pj8w-7593] Vela Insecure Defaults [GHSA-p72g-cgh9-ghjg] Failing DTLS handshakes may cause throttling to block processing of records [GHSA-8g2p-5pqh-5jmc] .NET Information Disclosure Vulnerability [GHSA-3gfj-fxx4-f22w] OpenFGA Authorization Bypass [GHSA-r4jg-5v89-9v62] Octocat.js vulnerable to code injection [GHSA-q9wv-22m9-vhqh] Tauri Filesystem Scope can be Partially Bypassed [GHSA-prm5-8g2m-24gg] Remote code execution via MongoDB BSON parser through prototype pollution [GHSA-4pcg-wr6c-h9cq] fastify/websocket vulnerable to uncaught exception via crash on malformed packet

CISA Known Exploted Vulnerabilities

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability CVE-2022-41091 Microsoft Windows Print Spooler Privilege Escalation Vulnerability CVE-2022-41073 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability CVE-2022-41125 Microsoft Windows Scripting Languages Remote Code Execution Vulnerability CVE-2022-41128 Samsung Mobile Devices Improper Access Control Vulnerability CVE-2021-25337 Samsung Mobile Devices Improper Access Control Vulnerability CVE-2021-25369 Samsung Mobile Devices Memory Corruption Vulnerability CVE-2021-25370

The known exploited vulnerabilities list contains vulnerabilities that are known to be activly exploited. They may not be new or recently discovered. Vulnerabilities listed here were added to this list in the past week.