Veille CVE

Semaine du 13 mai au 19 mai 2024

6 CVE

  1. CVE-2024-4761 – Non évaluée Exploitée

    Google Chromium V8

    Google Chromium V8 Out-of-Bounds Memory Write Vulnerability — Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  2. CVE-2021-40655 – Non évaluée Exploitée

    D-Link DIR-605 Router

    D-Link DIR-605 Router Information Disclosure Vulnerability — D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging a post request to the /getcfg.php page.

  3. CVE-2014-100005 – Non évaluée Exploitée

    D-Link DIR-600 Router

    D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability — D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.

  4. CVE-2024-30051 – Non évaluée Exploitée Rançongiciel

    Microsoft DWM Core Library

    Microsoft DWM Core Library Privilege Escalation Vulnerability — Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.

  5. CVE-2024-30040 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability — Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.

  6. CVE-2024-4671 – Non évaluée Exploitée

    Google Chromium

    Google Chromium Visuals Use-After-Free Vulnerability — Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.