Veille CVE

Semaine du 27 mars au 2 avril 2023

9 CVE

Critique 1 Élevée 4 Moyenne 1 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2022-3038 8.8 Élevée Exploitée

    google chrome · fedoraproject fedora

    Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  2. CVE-2022-39197 6.1 Moyenne Exploitée

    Helpsystems cobalt strike

    An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the payload (or create a new payload with the extracted information and then modify that username field to be malformed).

  3. CVE-2022-22706 7.8 Élevée Exploitée

    Arm bifrost gpu kernel driver · Arm midgard gpu kernel driver · Arm valhall gpu kernel driver

    Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

  4. CVE-2021-30900 7.8 Élevée Exploitée

    Apple iOS and iPadOS · Apple ipados · Apple iphone os · Apple macos

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.

  5. CVE-2017-7494 9.8 Critique Exploitée Rançongiciel

    samba · Samba samba · Debian debian linux

    Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

  6. CVE-2013-3163 8.8 Élevée Exploitée

    Microsoft internet explorer

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and CVE-2013-3151.

  7. CVE-2023-0266 – Non évaluée Exploitée

    Linux Kernel

    Linux Kernel Use-After-Free Vulnerability — Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.

  8. CVE-2022-42948 – Non évaluée Exploitée

    Fortra Cobalt Strike

    Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability — Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.

  9. CVE-2022-38181 – Non évaluée Exploitée

    Arm Mali Graphics Processing Unit (GPU)

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability — Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.