[BESAdmin-Announcements] Content Modification: Updates for Kev Content published 2025-12-15

[Announcements for BES Administrators]

Total New Fixlets:      0
Total Updated Fixlets:  69
Total Fixlets in Site:  3227
Total CVEs Covered:     937
Release Date:           2025-12-15

New Fixlets:
    No Fixlets Added In This Release

Updated Fixlets:
    26880    Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
- Any Version of Windows
    14210    Microsoft Malware Protection Engine Improper Restriction of
Operations Vulnerability - Any Version of Windows
    28930    Linux Kernel Use-After-Free Vulnerability - RHEL
    38530    Linux Kernel Out-of-Bounds Read Vulnerability - RHEL
    16390    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability -
Any Version of Windows
    25350    Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free
Vulnerability - Any Version of Windows
    30470    Linux Kernel Use-After-Free Vulnerability - RHEL
    32770    Apple Multiple Products WebKit Memory Corruption Vulnerability
- Ubuntu
    33290    Apple Multiple Products WebKit Memory Corruption Vulnerability
- RHEL
    32900    Apple Multiple Products WebKit Code Execution Vulnerability -
Debian
    32140    ImageMagick Improper Input Validation Vulnerability - Any
Version of Linux
    38520    Apple Multiple Products WebKit Out-of-Bounds Write
Vulnerability - Ubuntu
    16270    Mozilla Firefox and Thunderbird Type Confusion Vulnerability -
Any Version of Windows
    15890    Mozilla Firefox Information Disclosure Vulnerability - Any
Version of Windows
    33300    Apple Multiple Products WebKit Use-After-Free Vulnerability -
RHEL
    39700    Linux Kernel Heap Out-of-Bounds Write Vulnerability - RHEL
    15510    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
Windows
    28950    Linux Kernel Privilege Escalation Vulnerability - RHEL
    38650    Linux Kernel Improper Ownership Management Vulnerability -
RHEL
    33310    Apple Multiple Products WebKit Code Execution Vulnerability -
RHEL
    32670    Apple Multiple Products WebKit Type Confusion Vulnerability -
Ubuntu
    32930    Apple Multiple Products WebKit Type Confusion Vulnerability -
Debian
    18730    ImageMagick Server-Side Request Forgery (SSRF) Vulnerability -
Any Version of Linux
    32810    Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - Ubuntu
    39340    Google Chromium V8 Type Confusion Vulnerability - Any Version
of Windows
    30380    Linux Kernel Use-After-Free Vulnerability - Ubuntu
    32940    Apple Multiple Products WebKit Memory Corruption Vulnerability
- Debian
    39290    Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition
Vulnerability - Oracle Linux
    33840    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
Windows
    15410    Mozilla Firefox and Thunderbird Type Confusion Vulnerability -
Any Version of Windows
    26930    Google Chromium libvpx Heap Buffer Overflow Vulnerability -
Any Version of Windows
    27060    Ignite Realtime Openfire Path Traversal Vulnerability - Any
Version of MacOS
    36020    Linux Kernel Out-of-Bounds Write Vulnerability - RHEL
    16310    ImageMagick Arbitrary File Deletion Vulnerability - Any
Version of Windows
    39350    Google Chromium V8 Type Confusion Vulnerability - Any Version
of Linux
    33340    Apple Multiple Products WebKit Type Confusion Vulnerability -
RHEL
    37180    Linux Kernel Out-of-Bounds Access Vulnerability - RHEL
    30140    Linux Kernel Use-After-Free Vulnerability - Ubuntu
    32830    Apple Multiple Products WebKit Type Confusion Vulnerability -
Debian
    39360    Google Chromium V8 Type Confusion Vulnerability - Any Version
of MacOS
    32960    Apple Multiple Products WebKit Code Execution Vulnerability -
Debian
    39490    Mozilla Multiple Products Remote Code Execution Vulnerability
- Any Version of Windows
    31810    Linux Kernel Heap-Based Buffer Overflow Vulnerability - RHEL
    37060    HTTP/2 Rapid Reset Attack Vulnerability - Ubuntu
    16200    Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability -
Any Version of Windows
    36810    Apple Multiple Products WebKit Out-of-Bounds Write
Vulnerability - Debian
    15820    Mozilla Firefox and Thunderbird Denial-of-Service
Vulnerability - Any Version of Windows
    33240    Apple Multiple Products WebKit Type Confusion Vulnerability -
RHEL
    37720    Apple iOS Type Confusion Vulnerability - RHEL
    32090    ImageMagick Improper Input Validation Vulnerability - Any
Version of Windows
    16730    ImageMagick Server-Side Request Forgery (SSRF) Vulnerability -
Any Version of Windows
    26970    Ignite Realtime Openfire Path Traversal Vulnerability - Any
Version of Linux
    33370    Apple Multiple Products WebKit Code Execution Vulnerability -
RHEL
    18270    ImageMagick Arbitrary File Deletion Vulnerability - Any
Version of Linux
    38620    Linux Kernel Improper Ownership Management Vulnerability -
Ubuntu
    32860    Apple Multiple Products WebKit Use-After-Free Vulnerability -
Debian
    32990    Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - Debian
    14180    Microsoft Defender Remote Code Execution Vulnerability - Any
Version of Windows
    33000    Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - Debian
    15980    Mozilla Firefox And Thunderbird Use-After-Free Vulnerability -
Any Version of Windows
    33260    Apple iOS, iPadOS, and macOS Webkit Use-After-Free
Vulnerability - RHEL
    33390    Apple Multiple Products WebKit Type Confusion Vulnerability -
RHEL
    39280    Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition
Vulnerability - RHEL
    36850    Linux Kernel Use of Uninitialized Resource Vulnerability -
RHEL
    28660    Linux Kernel Use-After-Free Vulnerability - Ubuntu
    33270    Apple Multiple Products WebKit Use-After-Free Vulnerability -
RHEL
    33400    Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - RHEL
    16890    Mozilla Firefox Use-After-Free Vulnerability - Any Version of
Windows
    36860    Apple Multiple Products WebKit Out-of-Bounds Write
Vulnerability - RHEL
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20251215/7ea4c7a8/attachment.html>