Veille CVE

Semaine du 7 novembre au 13 novembre 2022

7 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 7 Tri : plus récentes
  1. CVE-2022-41128 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Scripting Languages Remote Code Execution Vulnerability — Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution.

  2. CVE-2022-41125 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability — Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.

  3. CVE-2022-41091 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability — Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.

  4. CVE-2022-41073 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability — Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.

  5. CVE-2021-25370 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Memory Corruption Vulnerability — Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.

  6. CVE-2021-25369 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Improper Access Control Vulnerability — Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370.

  7. CVE-2021-25337 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Improper Access Control Vulnerability — Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.