Veille CVE

Semaine du 10 octobre au 16 octobre 2022

2 CVE

  1. CVE-2022-41033 – Non évaluée Exploitée

    Microsoft Windows COM+ Event System Service

    Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability — Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation.

  2. CVE-2022-40684 – Non évaluée Exploitée Rançongiciel

    Fortinet Multiple Products

    Fortinet Multiple Products Authentication Bypass Vulnerability — Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.