Veille CVE

Mardi 14 mars 2023

3 CVE

  1. CVE-2023-24880 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability — Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

  2. CVE-2023-23397 – Non évaluée Exploitée

    Microsoft Office

    Microsoft Office Outlook Privilege Escalation Vulnerability — Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.

  3. CVE-2022-41328 – Non évaluée Exploitée

    Fortinet FortiOS

    Fortinet FortiOS Path Traversal Vulnerability — Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.