Wind39

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 153.4 Firefox versions prior to 157 Thunderbird versions prior to 157 **Description** A mitigation bypass exists within the DOM: Service Workers component. Service Workers are scripts that the browser runs in the background, separate from a web page, enabling features such as push notifications and offline access. **Recommendations** Update Firefox ESR to version 153.4. Update Firefox to version 157. Update Thunderbird to version 157.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 154.0.8037.57-1.1 **Description** A security issue exists that allows attackers to affect the system. **Recommendations** Update to version 154.0.8037.57-1.1.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 154.0.8037.57-1.1 **Description** A security issue exists that allows attackers to affect the system. **Recommendations** Update to version 154.0.8037.57-1.1.

**Name of the Vulnerable Software and Affected Versions** Synology DiskStation Manager (DSM) versions prior to 7.2.1-69057-12 Synology DiskStation Manager (DSM) versions prior to 7.2.2-72806-9 Synology DiskStation Manager (DSM) versions prior to 7.3.2-86009-4 Synology DiskStation Manager (DSM) versions prior to 7.4-90075 **Description** An SQL Injection issue exists in the EventScheduler API. This occurs due to improper neutralization of special elements used in an SQL command, allowing remote authenticated users with administrator privileges to obtain non-sensitive information. **Recommendations** Update to version 7.2.1-69057-12 or later. Update to version 7.2.2-72806-9 or later. Update to version 7.3.2-86009-4 or later. Update to version 7.4-90075 or later.