Weekly briefing

Week 25 · 19 Jun – 25 Jun 2023 UTC · assess the changes, then plan the next dates.

All dated changes in this period

10 source records · 8 groups

23 Jun 2023

SecurityVMware Tools

VMware Tools Authentication Bypass Vulnerability

VMware · exploited, added to CISA KEV

CVE-2023-20867

Assessment context

CISA lists it as exploited

23 Jun 2023

SecurityiOS and iPadOS / macOS3 source records

Apple · exploited, added to CISA KEV · 3 entries

Apple Multiple Products Integer Overflow Vulnerability
Apple · exploited, added to CISA KEV
CVE-2023-32434
Assessment context
CISA lists it as exploited
Apple Multiple Products WebKit Memory Corruption Vulnerability
Apple · exploited, added to CISA KEV
CVE-2023-32435
Assessment context
CISA lists it as exploited
Apple Multiple Products WebKit Type Confusion Vulnerability
Apple · exploited, added to CISA KEV
CVE-2023-32439
Assessment context
CISA lists it as exploited

22 Jun 2023

SecurityMozilla Firefox

Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

Mozilla · exploited, added to CISA KEV

CVE-2016-9079

Assessment context

CISA lists it as exploited

22 Jun 2023

SecurityMicrosoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k Privilege Escalation Vulnerability

Added to CISA KEV

CVE-2016-0165

Assessment context

CISA lists it as exploited

22 Jun 2023

ReleasesGitLab

GitLab 16.1

Tool release · GitLab monthly releases

20 Jun 2023

SecurityVMware vCenter Server

VMSA-2023-0014:VMware vCenter Server updates address multiple memory corruption vulnerabilities

Security advisory · VMware security advisories (Broadcom)

Assessment context

The vendor rates it high

20 Jun 2023

Updates and guidanceGlobal Secure Access / Microsoft Entra

Microsoft Entra private network connector 1.5.3437.0

Product news · Microsoft Entra private network connector releases

19 Jun 2023

ReleasesMicrosoft Entra

Microsoft Entra Connect 2.2.1.0

Entra Connect release · Microsoft Entra Connect releases and retirements

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.