Semaine du 13 mai au 19 mai 2024
6 CVE
-
Google Chromium V8
Google Chromium V8 Out-of-Bounds Memory Write Vulnerability — Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
-
D-Link DIR-605 Router
D-Link DIR-605 Router Information Disclosure Vulnerability — D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging a post request to the /getcfg.php page.
-
D-Link DIR-600 Router
D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability — D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.
-
Microsoft DWM Core Library
Microsoft DWM Core Library Privilege Escalation Vulnerability — Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.
-
Microsoft Windows
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability — Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.
-
Google Chromium
Google Chromium Visuals Use-After-Free Vulnerability — Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.