Veille CVE

Mercredi 6 avril 2022

3 CVE

  1. CVE-2021-3156 – Non évaluée Exploitée

    Sudo Sudo

    Sudo Heap-Based Buffer Overflow Vulnerability — Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.

  2. CVE-2021-31166 – Non évaluée Exploitée

    Microsoft HTTP Protocol Stack

    Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability — Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.

  3. CVE-2017-0148 – Non évaluée Exploitée Rançongiciel

    Microsoft SMBv1 server

    Microsoft SMBv1 Server Remote Code Execution Vulnerability — The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.