ANSSI

129 Discovery of 19 vulnerabilities in Treck's TCP/IP stack. On June 16, 2020, researchers announced the discovery of nineteen vulnerabilities in Treck's TCP/IP stack implementation. This component is used in many embedded systems and connected objects, including certain medical equipment and industrial control equipment. The most critical vulnerabilities allow remote arbitrary code execution. Treck Security Bulletin June 16, 2020 Other security advisories are issued by Ripple20, Carnegie Mellon, Braun, Green Hills Software and Schneider Electric. (Read more) The JSOF research laboratory announces the discovery of 19 critical zero-day flaws that affect the implementation of the TCP/IP stack dedicated to systems

143 CERT-FR Alert: Multiple vulnerabilities in Microsoft Windows CERT-FR publishes an alert regarding multiple vulnerabilities in Microsoft Windows that allow remote execution of arbitrary code. Microsoft said on Monday that it is aware of an unpatched vulnerability in the Windows Adobe Type Manager library that is being actively exploited by hackers. As part of a new security advisory, Microsoft warns that there are two remote code execution (RCE) vulnerabilities rated critical in the library that can be exploited in several ways. The Adobe Type Manager Library used in Microsoft Windows provides font management for the postscript format. This is loaded when reading a file. Playing a file can be

103 Multiple vulnerabilities in Adobe Acrobat and Acrobat Reader CERT-FR has just issued an opinion on multiple vulnerabilities discovered in Adobe Acrobat and Acrobat Reader. These vulnerabilities allow an attacker to cause arbitrary code execution, data privacy breach, and privilege escalation. (Read more) Refer to the publisher's security bulletin to obtain fixes (see Documentation section). Adobe Security Bulletin apsb20-13 March 18, 2020