Semaine du 10 juillet au 16 juillet 2023

Apple Multiple Products

Apple Multiple Products WebKit Code Execution Vulnerability — Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

SolarView Compact

SolarView Compact Command Injection Vulnerability — SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server.

Microsoft Windows

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability — Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Outlook

Microsoft Outlook Security Feature Bypass Vulnerability — Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

Microsoft Windows

Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability — Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt.

Microsoft Windows

Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability — Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.

Netwrix Auditor

Netwrix Auditor Insecure Object Deserialization Vulnerability — Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the NT AUTHORITY\SYSTEM user. Successful exploitation requires that the attacker is able to reach port 9004/TCP, which is commonly blocked by standard enterprise firewalling.