Semaine du 9 octobre au 15 octobre 2023

IETF HTTP/2

HTTP/2 Rapid Reset Attack Vulnerability — HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).

Microsoft Skype for Business

Microsoft Skype for Business Privilege Escalation Vulnerability — Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.

Microsoft WordPad

Microsoft WordPad Information Disclosure Vulnerability — Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.

Adobe Acrobat and Reader

Adobe Acrobat and Reader Use-After-Free Vulnerability — Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.

Cisco IOS and IOS XE

Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability — Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute malicious code or cause a device to crash.