Veille CVE

Semaine du 27 juin au 3 juillet 2022

9 CVE

Critique 1 Élevée 6 Moyenne 2 Faible 0 Non évaluée 0 Tri : plus récentes
  1. CVE-2022-26925 5.9 Moyenne Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows 10 Version 1909

    Windows LSA Spoofing Vulnerability

  2. CVE-2022-29499 9.8 Critique Exploitée Rançongiciel

    Mitel mivoice connect

    The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA.

  3. CVE-2021-4034 7.8 Élevée Exploitée Rançongiciel

    polkit · Polkit project polkit · Redhat enterprise linux server update services for sap solutions · Redhat enterprise linux

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

  4. CVE-2021-30983 7.8 Élevée Exploitée

    Apple iOS and iPadOS · Apple ipados · Apple iphone os

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges.

  5. CVE-2021-30533 6.5 Moyenne Exploitée

    Google Chrome · Fedoraproject fedora

    Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.

  6. CVE-2020-9907 7.8 Élevée Exploitée

    Apple iOS · Apple tvOS · Apple ipados · Apple iphone os

    A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.

  7. CVE-2020-3837 7.8 Élevée Exploitée

    Apple iOS · Apple macOS · Apple tvOS · Apple watchOS

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

  8. CVE-2019-8605 7.8 Élevée Exploitée

    Apple iOS · Apple macOS · Apple tvOS · Apple watchOS

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

  9. CVE-2018-4344 7.8 Élevée Exploitée

    iOS, macOS, tvOS, watchOS · Apple iphone os · Apple mac os x · Apple tvos

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.