Vulnerabilities

Vulnerability Posts

September Microsoft Patch Updates

There were approximately 80 CVEs addressed in this patch set. Most of the CVSS scores were lower than prior months.  For the highest vulnerabilities, exploit requires viewing malicious content or use of the Microsoft High Performance Computing Pack.  There are...

August 2025 Microsoft Patches

There were over 100 CVEs addressed (higher than normal) in this patch set. There were two 9.8 CVSS scores but both are GDI issues that are exploitable by user browsing.  MSMQ, Office, and Hyper-V have significant fixes. A publicly released Kerberos vulnerability...

July Microsoft Patch Notice

Please review and note that the CVE-2025-47981 vulnerability has the potential to become a worm that does not require user interaction for malicious activity. Please expedite testing an patching since the severity level of these protections may change if this is used...

June Microsoft Patch Tuesday

There are multiple critical patches for June.  Please note that if additional attack vectors or new exploits are released the priority for remediation will change. Testing and patching should be started for all systems. Systems using  Microsoft Office,...

Update for Tenable Agents version 10.8.2

The Tenable agents used to scan the UD environment for vulnerabilities has released a updated version 10.8.2 that fixes multiple issues including an bug that will cause some versions to go offline during plugin updates. Security Operations will be reaching out to...

November Microsoft Vulnerability Notice

There are multiple critical patches for November.  Please note that if additional attack vectors or new exploits are released the priority for remediation will change. Kerberos issues (CVE-2024-43639) will require expedited remediation if credible exploits are...

Updated patches for most Apple products

On July 29, Apple issued multiple security updates to address vulnerabilities impacting many current Apple products.  Review the July 29 entries on the Apple security updates page: https://support.apple.com/en-us/HT201222 Please upgrade to the latest patched software...

Google Chrome patches – Updated May 24, 2024

Google has released updated patches to address several vulnerabilities. Please review your browser version to make sure you are running the most recent stable release. The remediated stable version for Windows and Mac users is version 125.0.6422.112 or or later and...

Apple patches available for most products

Apple has published patches on May 14, 2024 that are recommended for testing and installation on all impacted systems. Some of the vulnerabilities may allow remote code execution. Please review the following advisories and apply necessary updates:  Safari 17.5 iOS...