by Artie Kaye

Your monthly update of high severity flaws which are actively being exploited. If you are using any of the programs or devices listed below it is advised to take the recommended steps to address the problem. Wyo Support News may have reported on some of these vulnerabilities in the past. Below are the items added in October.

Company	CVE	Platform	Details
Adobe	CVE-2023-21608	Acrobat and Reader	https://helpx.adobe.com/security/products/acrobat/apsb23-01.html
Apple	CVE-2023-42824	iOS and iPadOS	https://support.apple.com/en-us/HT213961
Arm	CVE-2023-4211	Mali GPU Kernel Driver	https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
Atlassian	CVE-2023-22515	Confluence Data Center and Server	https://confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html
Cisco	CVE-2023-20273 CVE-2023-20198	Cisco IOS XE Web UI	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z
Citrix	CVE-2023-4966	NetScaler ADC and NetScaler Gateway	https://support.citrix.com/article/CTX579459/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967
F5	CVE-2023-46748 CVE-2023-46747	BIG-IP Configuration Utility	https://my.f5.com/manage/s/article/K000137365 https://my.f5.com/manage/s/article/K000137353
Google	CVE-2023-5217	Chrome libvpx	https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html
IETF	CVE-2023-44487	HTTP/2	https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
JetBrains	CVE-2023-42793	TeamCity	https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/
Microsoft	CVE-2023-41763	Skype for Business	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-41763
	CVE-2023-36563	WordPad	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36563
	CVE-2023-28229	Windows CNG Key Isolation Service	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229
Progress	CVE-2023-40044	WS_FTP Server	https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023
Roundcube	CVE-2023-5631	Webmail	https://roundcube.net/news/2023/10/16/security-update-1.6.4-released https://roundcube.net/news/2023/10/16/security-updates-1.5.5-and-1.4.15