Original release date: August 17, 2021

CISA released an Alert today on devices incorporating older versions of multiple BlackBerry QNX products affected by a BadAlloc vulnerability. A malicious actor could exploit this vulnerability to take control of an affected system or cause a denial-of-service condition. 

Because devices incorporating older versions of BlackBerry QNX products support critical infrastructure and national critical functions, CISA is strongly urging all organizations whose devices use affected QNX-based systems to immediately apply the mitigations provided in CISA Alert AA21-229A and Blackberry Advisory QNX-2021-001.

Original release date: August 12, 2021 | Last revised: August 13, 2021

Drupal has released security updates to address vulnerabilities that could affect versions 8.9, 9.1, and 9.2. An attacker could exploit these vulnerabilities to take control of an affected system.

CISA encourages users and administrators to review Drupal Security Advisory SA-CORE-2021-005 and apply the necessary updates.

Original release date: August 10, 2021

Citrix has released a security update to address a vulnerability affecting Citrix ShareFile storage zones controller. An attacker can exploit this vulnerability to obtain access to sensitive information.

CISA recommends users and administrators review Citrix Security Bulletin CTX322787 and apply the necessary update.

Original release date: August 10, 2021

Intel has released security updates to address vulnerabilities multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CISA encourages users and administrators to review the following Intel advisories and apply the necessary updates: 

• NUC 9 Extreme Laptop Kits Advisory INTEL-SA-00553
• NUC Pro Chassis Element Driver Advisory INTEL-SA-00543
• Ethernet Linux Driver Advisory INTEL-SA-00515
• Optane PMem Advisory INTEL-SA-00512
• Graphics Drivers Advisory INTEL-SA-OO508
• Ethernet Adapters 800 Series Advisory INTEL-SA-00479

Original release date: August 10, 2021

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary updates:

• APSB21-66 Connect
• ASPB21-64 Magento