Veille CVE

Lundi 4 avril 2022

4 CVE

  1. CVE-2022-22965 – Non évaluée Exploitée

    VMware Spring Framework

    Spring Framework JDK 9+ Remote Code Execution Vulnerability — Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

  2. CVE-2022-22675 – Non évaluée Exploitée

    Apple macOS

    Apple macOS Out-of-Bounds Write Vulnerability — macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.

  3. CVE-2022-22674 – Non évaluée Exploitée

    Apple macOS

    Apple macOS Out-of-Bounds Read Vulnerability — macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.

  4. CVE-2021-45382 – Non évaluée Exploitée

    D-Link Multiple Routers

    D-Link Multiple Routers Remote Code Execution Vulnerability — A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary file.