[BESAdmin-Announcements] Content Modification: Updates for Kev Content published 2024-12-02

[Announcements for BES Administrators]

Total New Fixlets:      2
Total Updated Fixlets:  89
Total Fixlets in Site:  2752
Total CVEs Covered:     779
Release Date:           2024-11-28

New Fixlets:
    34960    Nostromo nhttpd Directory Traversal Vulnerability - Any
Version of Linux
    34970    CyberPanel Incorrect Default Permissions Vulnerability -
Ubuntu Linux


Updated Fixlets:
    32260    HTTP/2 Rapid Reset Attack Vulnerability - Windows 10
    16390    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability -
Any Version of Windows
    27150    Microsoft Streaming Service Proxy Privilege Escalation
Vulnerability - Windows Server 2019
    15890    Mozilla Firefox Information Disclosure Vulnerability - Any
Version of Windows
    17950    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability -
Any Version of Linux
    27680    Microsoft Windows Mark of the Web (MOTW) Security Feature
Bypass Vulnerability - Windows 10
    33840    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
Windows
    15410    Mozilla Firefox and Thunderbird Type Confusion Vulnerability -
Any Version of Windows
    33850    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
Linux
    33860    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
MacOS
    20050    Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability -
Any Version of MacOS
    32340    HTTP/2 Rapid Reset Attack Vulnerability - Windows Server 2022
    27740    Microsoft Windows Mark of the Web (MOTW) Security Feature
Bypass Vulnerability - Windows Server 2016
    29790    GitLab Community and Enterprise Editions Improper Access
Control Vulnerability - Any Version of Linux
    19560    Apache CouchDB Insecure Default Initialization of Resource
Vulnerability - Any Version of MacOS
    15980    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability -
Any Version of Windows
    33910    Microsoft Windows Kernel TOCTOU Race Condition Vulnerability -
Windows 11
    32380    Microsoft Windows Installer Improper Privilege Management
Vulnerability - Windows 11
    27780    Microsoft Windows Mark of the Web (MOTW) Security Feature
Bypass Vulnerability - Windows Server 2019
    30340    Microsoft Windows Error Reporting Service Improper Privilege
Management Vulnerability - Windows 11
    29830    Microsoft SmartScreen Prompt Security Feature Bypass
Vulnerability - Windows 11
    32390    Microsoft Windows Mark of the Web (MOTW) Protection Mechanism
Failure Vulnerability - Windows 11
    27280    Microsoft Streaming Service Proxy Privilege Escalation
Vulnerability - Windows Server 2022
    32400    HTTP/2 Rapid Reset Attack Vulnerability - Windows 11
    15510    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
Windows
    20120    Mozilla Firefox and Thunderbird Type Confusion Vulnerability -
Any Version of MacOS
    19610    TeamViewer Desktop Bypass Remote Login Vulnerability - Any
Version of MacOS
    27300    Microsoft Streaming Service Proxy Privilege Escalation
Vulnerability - Windows 11
    20650    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
MacOS
    17600    TeamViewer Desktop Bypass Remote Login Vulnerability - Any
Version of Linux
    19660    Mozilla Firefox Security Feature Bypass Vulnerability - Any
Version of MacOS
    20190    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability -
Any Version of MacOS
    18150    Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability -
Any Version of Linux
    27370    Microsoft WordPad Information Disclosure Vulnerability -
Windows 10
    17650    Mozilla Firefox Security Feature Bypass Vulnerability - Any
Version of Linux
    26880    Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
- Any Version of Windows
    25350    Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free
Vulnerability - Any Version of Windows
    27400    Microsoft WordPad Information Disclosure Vulnerability -
Windows Server 2019
    27920    Microsoft Windows Mark of the Web (MOTW) Security Feature
Bypass Vulnerability - Windows Server 2022
    19730    Mozilla Firefox and Thunderbird Denial-of-Service
Vulnerability - Any Version of MacOS
    27410    Microsoft WordPad Information Disclosure Vulnerability -
Windows Server 2016
    15640    Apache CouchDB Insecure Default Initialization of Resource
Vulnerability - Any Version of Windows
    27440    Microsoft WordPad Information Disclosure Vulnerability -
Windows Server 2022
    26930    Google Chromium libvpx Heap Buffer Overflow Vulnerability -
Any Version of Windows
    18230    Mozilla Firefox and Thunderbird Type Confusion Vulnerability -
Any Version of Linux
    27960    Microsoft Windows Mark of the Web (MOTW) Security Feature
Bypass Vulnerability - Windows 11
    25400    Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free
Vulnerability - Any Version of Linux
    32570    Microsoft Windows MSHTML Platform Spoofing Vulnerability -
Windows Server 2019
    27450    Microsoft WordPad Information Disclosure Vulnerability -
Windows 11
    19780    Mozilla Firefox Information Disclosure Vulnerability - Any
Version of MacOS
    17220    Mozilla Firefox and Thunderbird Type Confusion Vulnerability -
Any Version of Linux
    16200    Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability -
Any Version of Windows
    17740    Mozilla Firefox and Thunderbird Denial-of-Service
Vulnerability - Any Version of Linux
    26960    Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
- Any Version of Linux
    17750    GitLab Community and Enterprise Editions Remote Code Execution
Vulnerability - Any Version of Linux
    29530    Microsoft Windows Kernel Exposed IOCTL with Insufficient
Access Control Vulnerability - Windows 11
    14180    Microsoft Defender Remote Code Execution Vulnerability - Any
Version of Windows
    25450    Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free
Vulnerability - Any Version of MacOS
    32620    Microsoft Windows MSHTML Platform Spoofing Vulnerability -
Windows 11
    26990    Google Chromium libvpx Heap Buffer Overflow Vulnerability -
Any Version of Linux
    31610    Microsoft Windows Power Dependency Coordinator Privilege
Escalation Vulnerability - Windows 11
    14210    Microsoft Malware Protection Engine Improper Restriction of
Operations Vulnerability - Any Version of Windows
    31620    Microsoft Windows SmartScreen Security Feature Bypass
Vulnerability - Windows 11
    15750    Mozilla Firefox Security Feature Bypass Vulnerability - Any
Version of Windows
    19340    Mozilla Firefox and Thunderbird Type Confusion Vulnerability -
Any Version of MacOS
    16270    Mozilla Firefox and Thunderbird Type Confusion Vulnerability -
Any Version of Windows
    31630    Microsoft Windows Kernel Privilege Escalation Vulnerability -
Windows 11
    19860    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability -
Any Version of MacOS
    14230    Citrix Workspace Application and Receiver for Windows Remote
Code Execution Vulnerability - Any Version of Windows
    31640    Microsoft Windows Ancillary Function Driver for WinSock
Privilege Escalation Vulnerability - Windows 11
    17310    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
Linux
    27040    Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
- Any Version of MacOS
    31650    Microsoft Windows Scripting Engine Memory Corruption
Vulnerability - Windows 11
    18340    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability -
Any Version of Linux
    17850    Mozilla Firefox Information Disclosure Vulnerability - Any
Version of Linux
    32190    HTTP/2 Rapid Reset Attack Vulnerability - Windows Server 2016
    31170    Microsoft Windows Hyper-V Privilege Escalation Vulnerability -
Windows 11
    27080    Google Chromium libvpx Heap Buffer Overflow Vulnerability -
Any Version of MacOS
    32200    Microsoft Windows Installer Improper Privilege Management
Vulnerability - Windows Server 2019
    15820    Mozilla Firefox and Thunderbird Denial-of-Service
Vulnerability - Any Version of Windows
    31180    Microsoft Windows MSHTML Platform Spoofing Vulnerability -
Windows 11
    32210    Microsoft Windows Mark of the Web (MOTW) Protection Mechanism
Failure Vulnerability - Windows Server 2019
    32220    HTTP/2 Rapid Reset Attack Vulnerability - Windows Server 2019
    18910    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
Linux
    27110    Microsoft Streaming Service Proxy Privilege Escalation
Vulnerability - Windows 10
    29170    Microsoft Windows SmartScreen Security Feature Bypass
Vulnerability - Windows 11
    16890    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
Windows
    19450    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
MacOS
    29180    Microsoft Windows Internet Shortcut Files Security Feature
Bypass Vulnerability - Windows 11
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20241202/7ad63909/attachment.html>