Veille CVE

Semaine du 28 novembre au 4 décembre 2022

2 CVE

  1. CVE-2022-4135 – Non évaluée Exploitée

    Google Chromium GPU

    Google Chromium GPU Heap Buffer Overflow Vulnerability — Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  2. CVE-2021-35587 – Non évaluée Exploitée

    Oracle Fusion Middleware

    Oracle Fusion Middleware Unspecified Vulnerability — Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product.