Veille CVE

Semaine du 15 août au 21 août 2022

7 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 7 Tri : plus récentes
  1. CVE-2022-32894 – Non évaluée Exploitée

    Apple iOS and macOS

    Apple iOS and macOS Out-of-Bounds Write Vulnerability — Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges.

  2. CVE-2022-32893 – Non évaluée Exploitée

    Apple iOS and macOS

    Apple iOS and macOS Out-of-Bounds Write Vulnerability — Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.

  3. CVE-2022-2856 – Non évaluée Exploitée

    Google Chromium Intents

    Google Chromium Intents Insufficient Input Validation Vulnerability — Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  4. CVE-2022-26923 – Non évaluée Exploitée

    Microsoft Active Directory

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability — An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.

  5. CVE-2022-22536 – Non évaluée Exploitée

    SAP Multiple Products

    SAP Multiple Products HTTP Request Smuggling Vulnerability — SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.

  6. CVE-2022-21971 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Runtime Remote Code Execution Vulnerability — Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution.

  7. CVE-2017-15944 – Non évaluée Exploitée

    Palo Alto Networks PAN-OS

    Palo Alto Networks PAN-OS Remote Code Execution Vulnerability — Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained.