Veille CVE

Semaine du 1 janvier au 7 janvier 2024

2 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2023-7101 – Non évaluée Exploitée

    Spreadsheet::ParseExcel Spreadsheet::ParseExcel

    Spreadsheet::ParseExcel Remote Code Execution Vulnerability — Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.

  2. CVE-2023-7024 – Non évaluée Exploitée

    Google Chromium WebRTC

    Google Chromium WebRTC Heap Buffer Overflow Vulnerability — Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.