Semaine du 13 février au 19 février 2023

Cacti Cacti

Cacti Command Injection Vulnerability — Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code.

Apple Multiple Products

Apple Multiple Products WebKit Type Confusion Vulnerability — Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Microsoft Windows

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability — Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Windows

Microsoft Windows Graphic Component Privilege Escalation Vulnerability — Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Office

Microsoft Office Publisher Security Feature Bypass Vulnerability — Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system.