Veille CVE

Lundi 27 juin 2022

8 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 8 Tri : plus récentes
  1. CVE-2022-29499 – Non évaluée Exploitée Rançongiciel

    Mitel MiVoice Connect

    Mitel MiVoice Connect Data Validation Vulnerability — The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.

  2. CVE-2021-4034 – Non évaluée Exploitée Rançongiciel

    Red Hat Polkit

    Red Hat Polkit Out-of-Bounds Read and Write Vulnerability — The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.

  3. CVE-2021-30983 – Non évaluée Exploitée

    Apple iOS and iPadOS

    Apple iOS and iPadOS Buffer Overflow Vulnerability — Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.

  4. CVE-2021-30533 – Non évaluée Exploitée

    Google Chromium PopupBlocker

    Google Chromium PopupBlocker Security Bypass Vulnerability — Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation restrictions via a crafted iframe. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  5. CVE-2020-9907 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability — Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.

  6. CVE-2020-3837 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability — Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.

  7. CVE-2019-8605 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Use-After-Free Vulnerability — A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.

  8. CVE-2018-4344 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability — Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.