Veille CVE

Jeudi 30 mars 2023

9 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 9 Tri : plus récentes
  1. CVE-2023-0266 – Non évaluée Exploitée

    Linux Kernel

    Linux Kernel Use-After-Free Vulnerability — Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.

  2. CVE-2022-42948 – Non évaluée Exploitée

    Fortra Cobalt Strike

    Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability — Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.

  3. CVE-2022-39197 – Non évaluée Exploitée

    Fortra Cobalt Strike

    Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability — Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely.

  4. CVE-2022-38181 – Non évaluée Exploitée

    Arm Mali Graphics Processing Unit (GPU)

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability — Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.

  5. CVE-2022-3038 – Non évaluée Exploitée

    Google Chromium Network Service

    Google Chromium Network Service Use-After-Free Vulnerability — Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  6. CVE-2022-22706 – Non évaluée Exploitée

    Arm Mali Graphics Processing Unit (GPU)

    Arm Mali GPU Kernel Driver Unspecified Vulnerability — Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.

  7. CVE-2021-30900 – Non évaluée Exploitée

    Apple iOS, iPadOS, and macOS

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability — Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges.

  8. CVE-2017-7494 – Non évaluée Exploitée Rançongiciel

    Samba Samba

    Samba Remote Code Execution Vulnerability — Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.

  9. CVE-2013-3163 – Non évaluée Exploitée

    Microsoft Internet Explorer

    Microsoft Internet Explorer Memory Corruption Vulnerability — Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website.