To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Microsoft Corporation have recently released the security update for February that includes 77 vulnerability updates, which 9 of them are serious. Therefore, it is recommended to update the affected products as soon as possible. The released update mainly covers the following components: Windows and Windows components, Office and Office components, 3D Builder, Windows iSCSI, Microsoft Exchange Server, SQL Server, .NET and Visual Studio, Azure, Windows Defender and other products.

Special Attention for the following Vulnerabilities:

• Windows Graphics Components Remote Code Execution Vulnerabilities (CVE-2023-21823)

Attackers who successfully exploited this vulnerability could get the system privileges. Microsoft Corporation has detected that this vulnerability has been exploited.

For more details: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21823

• Microsoft Publisher Security Feature Bypass Vulnerabilities (CVE-2023-21715)

Attackers tricked targeted users to download and execute a special file, and successfully exploit it to bypass Office macro policies that block untrusted or malicious files. Microsoft Corporation has detected that this vulnerability has been exploited.

For more details: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21715

• Windows Common Log File System Driver Privilege Escalation Vulnerability (CVE-2023-23376)

Attackers who successfully exploited this vulnerability could get the system privileges. Microsoft Corporation has detected that this vulnerability has been exploited.

For more details: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-23376

• Microsoft Exchange Server Remote Code Execution Vulnerabilities (CVE-2023-21529, CVE-2023-21706, CVE-2023-21707)

This vulnerability could allow remote attackers to execute arbitrary code on a vulnerable server through network calls.

For more details:

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21529

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21706

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21707

• Microsoft Protected Extensible Authentication Protocol Remote Code Execution Vulnerabilities (CVE-2023-21689, CVE-2023-21690, CVE-2023-21692)

The vulnerability exists in the Protected Extensible Authentication Protocol (PEAP) server component, which is used to establish secure connections with wireless clients. Successful exploitation of the vulnerability could allow remote and unauthenticated attackers to execute arbitrary code. The target must be running Network Policy Server and configured with a network policy that allows PEAP to be vulnerable.

For more details:

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21689

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21690

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21692

Microsoft February Security Updates

For more details: https://msrc.microsoft.com/update-guide/releaseNote/2023-Feb

Mitigation
If the above-mentioned affected products are being used, please install the secure updates released by Microsoft Corporation as soon as possible.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Google have recently issued a security vulnerability notice about Chrome. Attackers can use this vulnerability to trigger the execution of arbitrary code on the target system. There are signs that related vulnerabilities have been exploited recently. Please be reminded to to update as soon as possible. 

Related vulnerabilities

• CVE-2023-0696

Due to the type confusion vulnerability in Google Chrome’s V8 engine, attackers can perform corruption through HTML pages.

• CVE-2023-0697

Due to faulty implementation of full-screen mode in Android version of Google Chrome, attackers could trick security mechanisms with HTML pages.

• CVE-2023-0698

Due to the out-of-bounds read vulnerability in WebRTC in Google Chrome, attackers can perform out-of-bounds memory read through HTML page.

• CVE-2023-0699

Due to the Use-After-Free  weakness in the GPU in Google Chrome, attackers can perform corruption through HTML pages and browser shutdowns.

• CVE-2023-0700

Due to improper implementation of Google Chrome when downloading, attackers can use HTML pages to spoof the content of the URL bar.

• CVE-2023-0701

Due to the buffer overflow vulnerability in Web UI in Google Chrome, attackers can perform corruption by convincing the victim to participate in a specific UI interaction.

• CVE-2023-0702

Due to the type confusion weakness in data transfer in Google Chrome, attackers can perform corruption by tricking victims to participate in specific UI interactions.

• CVE-2023-0703

Due to the type confusion weakness in DevTools in Google Chrome, attackers can perform corruption by tricking victims to participate in specific UI interactions.

• CVE-2023-0704

Due to the poor policy enforcement in DevTools  in Google Chrome, attackers can bypass the same-origin policy and proxy settings through HTML pages.

• CVE-2023-0705

Due to integer overflow vulnerability in the core of Google Chrome, attackers can perform corruption via HTML pages.

Affected Products:

• Google Chrome version lower than 110.0.5481.77 (Linux and Mac) and 110.0.5481.77./78 (Windows)

For more details, please refer to: https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html

Mitigation
If the above-mentioned affected products are being used, please update the Google Chrome as soon as possible.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Adobe have recently issued a security vulnerability notice about Adobe Acrobat and Acrobat Reader. Attackers can use this vulnerability to trigger the execution of arbitrary code on the target system. There are signs that related vulnerabilities have been exploited recently. Please be reminded to to update as soon as possible. 

Related vulnerabilities

Exploiting the weakness after memory reuse (CWE-416), attackers will create malicious documents and induce victims to open, which will trigger the arbitrary code execution attacks (CVE-2023-201608).

Affected Products:

• Acrobat DC and Scrobat Reader DC: 22.003.20282 (Win), 22.003.20281 (Mac) and previous versions
• Acrobat 2020 and Acrobat Reader 2020: 20.005.30418 and previous versions

For more details, please refer to: https://helpx.adobe.com/security/products/acrobat/apsb23-01.html

Mitigation
If the above-mentioned affected products are being used, please install the security updates released by Adobe as soon as possible and avoid opening any suspicious files.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office