[BESAdmin-Announcements] Content Modification: Updates for KEV Content published 2026-09-14
Announcements for BES Administrators
besadmin-announcements at bigmail.bigfix.com
Mon Sep 14 11:33:49 PDT 2026
Total New Fixlets: 6
Total Updated Fixlets: 202
Total Fixlets in Site: 3576
Total CVEs Covered: 1090
Release Date: 2026-09-14
New Fixlets:
44320 Red Hat Automatic Bug Reporting Tool Privilege Escalation
Vulnerability - RHEL
44310 Red Hat Libuser Race Condition Vulnerability - RHEL
44560 JFrog Artifactory Incorrect Authorization Vulnerability - Any
Operating System
44570 ConnectWise ScreenConnect Improper Privilege Management and
Missing Authorization Vulnerability - Any Version of Windows
44580 GitLab Community Edition and Enterprise Edition Path Traversal
Vulnerability - Any Version of Linux
44550 JFrog Artifactory Improper Authentication Vulnerability - Any
Operating System
Updated Fixlets:
33280 WebKitGTK Memory Corruption Vulnerability - RHEL
40960 Linux Kernel Integer Overflow Vulnerability - Ubuntu
32770 Apple Multiple Products WebKit Memory Corruption Vulnerability
- Ubuntu
37380 VMware ESXi OpenSLP Use-After-Free Vulnerability - VMware ESXi
6.7
29190 Red Hat Polkit Incorrect Authorization Vulnerability - Ubuntu
36870 Linux Kernel Use of Uninitialized Resource Vulnerability -
Oracle Linux
33290 Apple Multiple Products WebKit Memory Corruption Vulnerability
- RHEL
38410 Linux Kernel Improper Privilege Management Vulnerability -
Ubuntu
39440 GNU Bash OS Command Injection Vulnerability - SLE
36880 Apple Multiple Products WebKit Out-of-Bounds Write
Vulnerability - Oracle Linux
28690 Linux Kernel Race Condition Vulnerability - Ubuntu
33300 Apple Multiple Products WebKit Use-After-Free Vulnerability -
RHEL
34840 Android Kernel Remote Code Execution Vulnerability - Ubuntu
37400 VMware ESXi OpenSLP Use-After-Free Vulnerability - VMware ESXi
6.5
29210 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution
Vulnerability - Ubuntu
28700 Linux Kernel Privilege Escalation Vulnerability - Ubuntu
33310 Apple Multiple Products WebKit Code Execution Vulnerability -
RHEL
30240 Linux Kernel Use-After-Free Vulnerability - RHEL
37410 HTTP/2 Rapid Reset Attack Vulnerability - RHEL
34850 Android Kernel Remote Code Execution Vulnerability - Debian
28710 Android Kernel Use-After-Free Vulnerability - Ubuntu
33320 Apple Multiple Products WebKit Integer Overflow Vulnerability
- RHEL
41000 Linux Kernel Integer Overflow Vulnerability - RHEL
32810 Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - Ubuntu
37420 VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer
Overflow Vulnerability - RHEL
33330 Apple Multiple Products WebKit Memory Corruption Vulnerability
- RHEL
41010 Linux Kernel Integer Overflow Vulnerability - Oracle Linux
34870 Android Kernel Remote Code Execution Vulnerability - RHEL
28730 Linux Kernel Privilege Escalation Vulnerability - Debian
33340 Apple Multiple Products WebKit Type Confusion Vulnerability -
RHEL
43070 Linux Kernel Improper Authentication Vulnerability - Amazon
Linux
32830 Apple Multiple Products WebKit Type Confusion Vulnerability -
Debian
34880 Android Kernel Remote Code Execution Vulnerability - Oracle
Linux
37440 HTTP/2 Rapid Reset Attack Vulnerability - Oracle Linux
31810 Linux Kernel Heap-Based Buffer Overflow Vulnerability - RHEL
28740 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability -
Debian
33350 Apple Multiple Products WebKit Memory Corruption Vulnerability
- RHEL
37450 VMware ESXi Authentication Bypass Vulnerability - VMware ESXi
8.0
31820 Linux Kernel Privilege Escalation Vulnerability - Oracle Linux
33360 Apple Multiple Products WebKit Storage Use-After-Free
Vulnerability - RHEL
29270 Red Hat Polkit Incorrect Authorization Vulnerability - SLE
31830 Linux Kernel Race Condition Vulnerability - Oracle Linux
33370 Apple Multiple Products WebKit Code Execution Vulnerability -
RHEL
32860 Apple Multiple Products WebKit Use-After-Free Vulnerability -
Debian
32350 Linux Kernel PIE Stack Buffer Corruption Vulnerability - RHEL
31840 Linux Kernel Privilege Escalation Vulnerability - Oracle Linux
33380 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution
Vulnerability - RHEL
38500 Linux Kernel Improper Privilege Management Vulnerability -
RHEL
32360 Linux Kernel PIE Stack Buffer Corruption Vulnerability - SLE
44140 Linux Kernel Unspecified Vulnerability - RHEL
33390 Apple Multiple Products WebKit Type Confusion Vulnerability -
RHEL
32370 Linux Kernel PIE Stack Buffer Corruption Vulnerability -
Oracle Linux
31860 Linux Kernel Improper Input Validation Vulnerability - Oracle
Linux
28790 Linux Kernel Race Condition Vulnerability - Debian
44150 Linux Kernel Unspecified Vulnerability - Oracle Linux
33400 Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - RHEL
38520 Apple Multiple Products WebKit Out-of-Bounds Write
Vulnerability - Ubuntu
31870 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability -
Oracle Linux
38530 Linux Kernel Out-of-Bounds Read Vulnerability - RHEL
32900 Apple Multiple Products WebKit Code Execution Vulnerability -
Debian
31880 Red Hat Polkit Incorrect Authorization Vulnerability - Oracle
Linux
33420 Apple iOS, iPadOS, and macOS Webkit Use-After-Free
Vulnerability - Oracle Linux
31890 Linux Kernel Heap-Based Buffer Overflow Vulnerability - Oracle
Linux
33430 Apple Multiple Products WebKit Use-After-Free Vulnerability -
Oracle Linux
29340 Red Hat Polkit Incorrect Authorization Vulnerability - RHEL
31900 Linux Kernel Integer Overflow Vulnerability - Oracle Linux
43170 Linux Kernel Improper Authentication Vulnerability - RHEL
32930 Apple Multiple Products WebKit Type Confusion Vulnerability -
Debian
29350 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution
Vulnerability - RHEL
31910 Linux Kernel Use-After-Free Vulnerability - Oracle Linux
36010 Linux Kernel Out-of-Bounds Write Vulnerability - SLE
33450 Apple Multiple Products WebKit Memory Corruption Vulnerability
- Oracle Linux
30380 Linux Kernel Use-After-Free Vulnerability - Ubuntu
32940 Apple Multiple Products WebKit Memory Corruption Vulnerability
- Debian
43180 Linux Kernel Improper Authentication Vulnerability - Oracle
Linux
29360 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution
Vulnerability - RHEL
44210 Linux Kernel Out-of-Bounds Write Vulnerability - Ubuntu
36020 Linux Kernel Out-of-Bounds Write Vulnerability - RHEL
33460 Apple Multiple Products WebKit Use-After-Free Vulnerability -
Oracle Linux
30390 Linux Kernel Use-After-Free Vulnerability - Debian
40630 Google Chromium Out of Bounds Memory Access Vulnerability -
Debian
29370 Linux Kernel Privilege Escalation Vulnerability - Ubuntu
39420 GNU Bash OS Command Injection Vulnerability - Oracle Linux
36030 Samba Remote Code Execution Vulnerability - Ubuntu
32960 Apple Multiple Products WebKit Code Execution Vulnerability -
Debian
40640 Apple Multiple Products Use-After-Free WebKit Vulnerability -
Debian
37060 HTTP/2 Rapid Reset Attack Vulnerability - Ubuntu
29380 Linux Kernel Privilege Escalation Vulnerability - Debian
31940 Linux Kernel Use-After-Free Vulnerability - Oracle Linux
37070 Linux Kernel Out-of-Bounds Read Vulnerability - Ubuntu
31950 Linux Kernel Privilege Escalation Vulnerability - Oracle Linux
33490 Apple Multiple Products WebKit Type Confusion Vulnerability -
Oracle Linux
43220 Linux Kernel Improper Authentication Vulnerability - SLE
37080 Linux Kernel Out-of-Bounds Access Vulnerability - Ubuntu
31960 Linux Kernel Race Condition Vulnerability - Oracle Linux
28890 Linux Kernel Race Condition Vulnerability - RHEL
38620 Linux Kernel Improper Ownership Management Vulnerability -
Ubuntu
33500 Apple Multiple Products WebKit Memory Corruption Vulnerability
- Oracle Linux
32990 Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - Debian
29410 Linux Kernel Privilege Escalation Vulnerability - RHEL
37090 HTTP/2 Rapid Reset Attack Vulnerability - Debian
28900 Linux Kernel Privilege Escalation Vulnerability - RHEL
31970 Linux Kernel Privilege Escalation Vulnerability - Oracle Linux
33000 Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - Debian
31980 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution
Vulnerability - Oracle Linux
28910 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability -
RHEL
33520 Apple Multiple Products WebKit Type Confusion Vulnerability -
Oracle Linux
30450 Linux Kernel Use-After-Free Vulnerability - SLE
37620 Apple iOS, iPadOS, macOS Use-After-Free Vulnerability - Ubuntu
31990 Linux Kernel Use-After-Free Vulnerability - Oracle Linux
28920 Sudo Heap-Based Buffer Overflow Vulnerability - RHEL
38650 Linux Kernel Improper Ownership Management Vulnerability -
RHEL
33530 Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - Oracle Linux
28930 Linux Kernel Use-After-Free Vulnerability - RHEL
30470 Linux Kernel Use-After-Free Vulnerability - RHEL
37640 Apple iOS Type Confusion Vulnerability - Ubuntu
39700 Linux Kernel Heap Out-of-Bounds Write Vulnerability - RHEL
37140 Linux Kernel Use of Uninitialized Resource Vulnerability - SLE
28950 Linux Kernel Privilege Escalation Vulnerability - RHEL
36120 Samba Remote Code Execution Vulnerability - SLE
38680 Linux Kernel Improper Ownership Management Vulnerability - SLE
37150 HTTP/2 Rapid Reset Attack Vulnerability - SLE
39710 Linux Kernel Heap Out-of-Bounds Write Vulnerability - Oracle
Linux
28960 Linux Kernel Race Condition Vulnerability - RHEL
36130 Samba Remote Code Execution Vulnerability - RHEL
39720 Linux Kernel Heap Out-of-Bounds Write Vulnerability - SLE
28970 Linux Kernel Integer Overflow Vulnerability - RHEL
44330 Red Hat Libuser Race Condition Vulnerability - Oracle Linux
36140 Samba Remote Code Execution Vulnerability - Oracle Linux
40750 Apple Multiple Products Use-After-Free WebKit Vulnerability -
RHEL
33070 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution
Vulnerability - SLE
28980 Linux Kernel Race Condition Vulnerability - SLE
44340 Red Hat Automatic Bug Reporting Tool Privilege Escalation
Vulnerability - Oracle Linux
43830 Apache Tomcat Missing Encryption of Sensitive Data
Vulnerability - RHEL
40760 Apple Multiple Products Use-After-Free WebKit Vulnerability -
Oracle Linux
37180 Linux Kernel Out-of-Bounds Access Vulnerability - RHEL
33090 Apple Multiple Products WebKit Use-After-Free Vulnerability -
SLE
37190 Linux Kernel Out-of-Bounds Read Vulnerability - Oracle Linux
35660 VMware Tools Authentication Bypass Vulnerability - Ubuntu
33100 WebKitGTK Memory Corruption Vulnerability - SLE
37710 Apple iOS, iPadOS, macOS Use-After-Free Vulnerability - RHEL
37200 Linux Kernel Out-of-Bounds Access Vulnerability - Oracle Linux
29010 Sudo Heap-Based Buffer Overflow Vulnerability - SLE
35670 VMware Tools Authentication Bypass Vulnerability - Debian
33110 Apple Multiple Products WebKit Memory Corruption Vulnerability
- SLE
37720 Apple iOS Type Confusion Vulnerability - RHEL
37210 HTTP/2 Rapid Reset Attack Vulnerability - leap
33120 Apple Multiple Products WebKit Use-After-Free Vulnerability -
SLE
37220 VMware ESXi, Workstation, and Fusion Information Disclosure
Vulnerability - VMware ESXi 8.0
41830 Apple Multiple Products Integer Overflow or Wraparound
Vulnerability - RHEL
33130 Apple Multiple Products WebKit Code Execution Vulnerability -
SLE
37230 VMware ESXi Arbitrary Write Vulnerability - VMware ESXi 8.0
41840 Apple Multiple Products Integer Overflow or Wraparound
Vulnerability - Oracle Linux
33140 Apple Multiple Products WebKit Integer Overflow Vulnerability
- SLE
37750 Apple iOS Type Confusion Vulnerability - Oracle Linux
37240 VMware ESXi and Workstation TOCTOU Race Condition
Vulnerability - VMware ESXi 8.0
33150 Apple Multiple Products WebKit Memory Corruption Vulnerability
- SLE
37760 Apple iOS, iPadOS, macOS Use-After-Free Vulnerability - SLE
37250 VMware ESXi, Workstation, and Fusion Information Disclosure
Vulnerability - VMware ESXi 7.0
33160 Apple Multiple Products WebKit Type Confusion Vulnerability -
SLE
37770 Apple iOS Type Confusion Vulnerability - SLE
37260 VMware ESXi Arbitrary Write Vulnerability - VMware ESXi 7.0
33170 Apple Multiple Products WebKit Memory Corruption Vulnerability
- SLE
37270 VMware ESXi and Workstation TOCTOU Race Condition
Vulnerability - VMware ESXi 7.0
41880 Apple Multiple Products Buffer Overflow Vulnerability - Debian
32670 Apple Multiple Products WebKit Type Confusion Vulnerability -
Ubuntu
33190 Apple Multiple Products WebKit Code Execution Vulnerability -
SLE
32680 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution
Vulnerability - Ubuntu
33200 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution
Vulnerability - SLE
36790 Linux Kernel Use of Uninitialized Resource Vulnerability -
Ubuntu
33210 Apple Multiple Products WebKit Type Confusion Vulnerability -
SLE
35770 Oracle Solaris and Zettabyte File System (ZFS) Unspecified
Vulnerability - Solaris
30140 Linux Kernel Use-After-Free Vulnerability - Ubuntu
36800 Linux Kernel Use of Uninitialized Resource Vulnerability -
Debian
28610 Linux Kernel Race Condition Vulnerability - Ubuntu
33220 Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - SLE
35780 Oracle Solaris Privilege Escalation Vulnerability - Solaris
39370 Sudo Inclusion of Functionality from Untrusted Control Sphere
Vulnerability - Ubuntu
36810 Apple Multiple Products WebKit Out-of-Bounds Write
Vulnerability - Debian
28620 Linux Kernel Privilege Escalation Vulnerability - Ubuntu
33230 Apple Multiple Products WebKit Out-of-Bounds Read
Vulnerability - SLE
35790 VMware Tools Authentication Bypass Vulnerability - SLE
32720 Apple Multiple Products WebKit Use-After-Free Vulnerability -
Ubuntu
41940 Apple Multiple Products Buffer Overflow Vulnerability - RHEL
39380 GNU Bash OS Command Injection Vulnerability - Ubuntu
28630 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability -
Ubuntu
33240 Apple Multiple Products WebKit Type Confusion Vulnerability -
RHEL
35800 VMware Tools Authentication Bypass Vulnerability - RHEL
31710 Linux Kernel Heap-Based Buffer Overflow Vulnerability - Ubuntu
28640 Sudo Heap-Based Buffer Overflow Vulnerability - Ubuntu
33250 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution
Vulnerability - RHEL
35810 VMware Tools Authentication Bypass Vulnerability - Oracle
Linux
32740 Apple Multiple Products WebKit Integer Overflow Vulnerability
- Ubuntu
39400 Sudo Inclusion of Functionality from Untrusted Control Sphere
Vulnerability - RHEL
28650 Linux Kernel Privilege Escalation Vulnerability - Ubuntu
33260 Apple iOS, iPadOS, and macOS Webkit Use-After-Free
Vulnerability - RHEL
32750 Apple Multiple Products WebKit Memory Corruption Vulnerability
- Ubuntu
37360 VMware ESXi OpenSLP Use-After-Free Vulnerability - VMware ESXi
7.0
36850 Linux Kernel Use of Uninitialized Resource Vulnerability -
RHEL
28660 Linux Kernel Use-After-Free Vulnerability - Ubuntu
33270 Apple Multiple Products WebKit Use-After-Free Vulnerability -
RHEL
36860 Apple Multiple Products WebKit Out-of-Bounds Write
Vulnerability - RHEL
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20260914/29eb4b78/attachment.html>
More information about the Besadmin-announcements
mailing list