Veille CVE

Semaine du 15 novembre au 21 novembre 2021

4 CVE

  1. CVE-2021-42292 7.8 Élevée Exploitée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2013 Service Pack 1 · Microsoft Excel 2016 · Microsoft Office 2013 Service Pack 1

    Microsoft Excel Security Feature Bypass Vulnerability

  2. CVE-2021-40449 7.8 Élevée Exploitée Rançongiciel

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows 10 Version 1909

    Win32k Elevation of Privilege Vulnerability

  3. CVE-2021-22204 7.8 Élevée Exploitée

    ExifTool · Exiftool project exiftool · Debian debian linux · Fedoraproject fedora

    Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

  4. CVE-2021-42321 – Non évaluée Exploitée Rançongiciel

    Microsoft Exchange

    Microsoft Exchange Server Remote Code Execution Vulnerability — An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.