Veille CVE

Semaine du 27 mai au 2 juin 2024

4 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2024-24919 – Non évaluée Exploitée Rançongiciel

    Check Point Quantum Security Gateways

    Check Point Quantum Security Gateways Information Disclosure Vulnerability — Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

  2. CVE-2024-1086 – Non évaluée Exploitée Rançongiciel

    Linux Kernel

    Linux Kernel Use-After-Free Vulnerability — Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

  3. CVE-2024-4978 – Non évaluée Exploitée

    Justice AV Solutions Viewer

    Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability — Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4). When run, this creates a backdoor connection to a malicious C2 server.

  4. CVE-2024-5274 – Non évaluée Exploitée

    Google Chromium V8

    Google Chromium V8 Type Confusion Vulnerability — Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.