Serial number:AV25-535
Date:August 22, 2025

On August 21, 2025, Microsoft published a security update to address vulnerabilities in the following products:

• Microsoft Edge Stable Channel - versions prior to 139.0.3405.111
• Microsoft Extended Edge Stable Channel - versions prior to 138.0.3351.144

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• Microsoft Edge Stable Channel Release Notes

Serial number:AV25-534
Date:August 20, 2025

On August 20, 2025, HPE published a security advisory to address vulnerabilities in the following product:

• HPE Telco Unified OSS Console – version 3.1.16

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HPESBNW04941 Rev. 1 - HPE Telco Unified OSS Console, Multiple Vulnerabilities
• HPE Security Bulletin Library

Serial number:AV25-533
Date:August 20, 2025

On August 20, 2025, Apple published security updates to address a vulnerability in the following products:

• iOS and iPadOS – versions prior to 18.6.2
• iPadOS – versions prior to 17.7.10
• macOS Sequoia – versions prior to 15.6.1
• macOS Sonoma – versions prior to 14.7.8
• macOS Ventura – versions prior to 13.7.8

Apple has indicated that CVE-2025-43300 may have been exploited.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Apple Security Updates

Serial number:AV25-532
Date:August 20, 2025

On August 20, 2025, Cisco published security advisories to address vulnerabilities in the following products:

• Cisco Duo Authentication Proxy – version 5.8.2 and prior and version 6.5.1 and prior
• Cisco Evolved Programmable Network Manager (EPNM) – version 7.1 and prior, versions 8.0 and 8.1
• Cisco Prime Infrastructure – version 3.9 and prior and version 3.10
• Cisco Identity Services Engine (ISE) – version 3.1 and prior, versions 3.2 and 3.3

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates if available.

• Cisco Duo Authentication Proxy Information Disclosure Vulnerability
• Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Sensitive Information Disclosure Vulnerability
• Cisco Identity Services Engine Arbitrary File Upload Vulnerability
• Cisco Security Advisories

Serial number:AV25-531
Date:August 20, 2025

On August 19, 2025, Commvault published security advisories to address vulnerabilities in the following products:

• Commvault - versions 11.32.0 to 11.32.101
• Commvault - versions 11.36.0 to 11.36.59

Open-source reporting has indicated that proof-of-concept exploit code exists for these vulnerabilities CVE-2025-57788, CVE-2025-57789, CVE-2025-57790 and CVE-2025-57791.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• CV_2025_08_1: Argument Injection Vulnerability in CommServe
• CV_2025_08_2: Path Traversal Vulnerability
• CV_2025_08_3: Unauthorized API Access Risk
• CV_2025_08_4: Vulnerability in Initial Administrator Login Process
• Commvault Cloud Security Advisories

Serial number:AV25-530
Date:August 20, 2025

On August 19, 2025, Google published security advisories to address a vulnerability in the following product:

• Stable Channel Chrome for Desktop - versions prior to 139.0.7258.138/.139 (Windows/Mac) and 139.0.7258.138 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory