Veille CVE

Mardi 10 janvier 2023

2 CVE

  1. CVE-2023-21674 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability — Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.

  2. CVE-2022-41080 – Non évaluée Exploitée Rançongiciel

    Microsoft Exchange Server

    Microsoft Exchange Server Privilege Escalation Vulnerability — Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.