Veille CVE

Semaine du 13 décembre au 19 décembre 2021

2 CVE

  1. CVE-2021-43890 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows AppX Installer Spoofing Vulnerability — Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.

  2. CVE-2021-4102 – Non évaluée Exploitée

    Google Chromium V8

    Google Chromium V8 Use-After-Free Vulnerability — Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.