Veille CVE

Semaine du 9 janvier au 15 janvier 2023

2 CVE

  1. CVE-2023-21674 8.8 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows Server 2022

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  2. CVE-2022-41080 – Non évaluée Exploitée Rançongiciel

    Microsoft Exchange Server

    Microsoft Exchange Server Privilege Escalation Vulnerability — Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.