Veille CVE

Vendredi 23 juin 2023

5 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 5 Tri : plus récentes
  1. CVE-2023-32439 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products WebKit Type Confusion Vulnerability — Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

  2. CVE-2023-32435 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products WebKit Memory Corruption Vulnerability — Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

  3. CVE-2023-32434 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Integer Overflow Vulnerability — Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges.

  4. CVE-2023-27992 – Non évaluée Exploitée

    Zyxel Multiple Network-Attached Storage (NAS) Devices

    Zyxel Multiple NAS Devices Command Injection Vulnerability — Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request.

  5. CVE-2023-20867 – Non évaluée Exploitée

    VMware Tools

    VMware Tools Authentication Bypass Vulnerability — VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.