Cyber alerts - NHS England Digital

CC-4262 Medium

Published Wednesday 15 February 2023 (02:47) (updated 7 March 2023)

Microsoft Releases February 2023 Security Updates

Scheduled updates for Microsoft products

CC-4277 Medium

Published Thursday 9 March 2023 (11:40) (updated 9 March 2023)

Zoho ManageEngine ADSelfService Plus Remote Command Execution Vulnerability

Vulnerability allows for remote command execution when performing a password change or reset

CC-4276 Medium

Published Thursday 9 March 2023 (12:24) (updated 9 March 2023)

Microsoft Word Remote Code Execution Vulnerability CVE-2023-21716

Proof of Concept (PoC) code released for remote code execution vulnerability CVE-2023-21716 in Microsoft Word

CC-4278 Medium

Published Thursday 9 March 2023 (05:14) (updated 9 March 2023)

FortiOS and FortiProxy Heap Buffer Underflow Vulnerability in Administrative Interface

Vulnerability CVE-2023-25610 could allow an unauthenticated, remote attacker to execute arbitrary code or achieve a denial-of-service on the GUI, via specifically crafted requests.

CC-4275 Low

Published Friday 3 March 2023 (02:57) (updated 10 March 2023)

Medtronic Micro Clinician App and InterStim X App Vulnerabilities

Medtronic Micro Clinician App (A51200) and InterStim X Clinician App (A51300) contain a vulnerability that could cause the applications' custom passwords to be reset to default

CC-4279 Information only

Published Thursday 9 March 2023 (04:59) (updated 10 March 2023)

Multiple Vulnerabilities in Cisco IOS XR Software

Security advisories include one High severity vulnerability involving denial-of-service and one Medium severity vulnerability involving unauthorised information disclosure

CC-4281 Medium

Published Friday 10 March 2023 (04:32) (updated 14 March 2023)

Fortinet Release Multiple Security Updates

Updates address 1 Low, 8 Medium, and 5 High severity vulnerabilities including an actively exploit vulnerability in FortiOS

CC-4282 High

Published Wednesday 15 March 2023 (09:01) (updated 15 March 2023)

Critical Privilege Escalation Vulnerability in Microsoft Outlook for Windows

Microsoft has released a critical security update to address zero-day vulnerability known as CVE-2023-23397

CC-4284 Medium

Published Wednesday 15 March 2023 (12:33) (updated 15 March 2023)

SAP Releases March 2023 Security Updates

Scheduled security updates address vulnerabilities affecting multiple products

CC-4201 Medium

Published Wednesday 26 October 2022 (04:42) (updated 13 March 2023)

VMware Releases Critical Security Update for Cloud Foundation

Critical update addresses an RCE vulnerability and a second vulnerability that could lead to a DoS condition