Veille CVE

Semaine du 13 mars au 19 mars 2023

4 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2023-26360 – Non évaluée Exploitée

    Adobe ColdFusion

    Adobe ColdFusion Deserialization of Untrusted Data Vulnerability — Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.

  2. CVE-2023-24880 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability — Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

  3. CVE-2023-23397 – Non évaluée Exploitée

    Microsoft Office

    Microsoft Office Outlook Privilege Escalation Vulnerability — Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.

  4. CVE-2022-41328 – Non évaluée Exploitée

    Fortinet FortiOS

    Fortinet FortiOS Path Traversal Vulnerability — Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.