Veille CVE

Jeudi 5 octobre 2023

2 CVE sur 3

Critique 1 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Tri : plus récentes
  1. CVE-2023-42824 7.8 Élevée Exploitée

    Apple iOS and iPadOS · Apple ipados · Apple iphone os

    The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.

  2. CVE-2023-40044 8.8 Élevée Exploitée Rançongiciel

    Progress Software Corporation WS_FTP Server · Progress ws ftp server

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.