Veille CVE

Mercredi 13 septembre 2023

3 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2023-4863 – Non évaluée Exploitée

    Google Chromium WebP

    Google Chromium WebP Heap-Based Buffer Overflow Vulnerability — Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.

  2. CVE-2023-35674 – Non évaluée Exploitée

    Android Framework

    Android Framework Privilege Escalation Vulnerability — Android Framework contains an unspecified vulnerability that allows for privilege escalation.

  3. CVE-2023-20269 – Non évaluée Exploitée Rançongiciel

    Cisco Adaptive Security Appliance and Firepower Threat Defense

    Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability — Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user.