Veille CVE

Mardi 15 octobre 2024

3 CVE

  1. CVE-2024-9680 – Non évaluée Exploitée Rançongiciel

    Mozilla Firefox

    Mozilla Firefox Use-After-Free Vulnerability — Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.

  2. CVE-2024-30088 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows Kernel TOCTOU Race Condition Vulnerability — Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation.

  3. CVE-2024-28987 – Non évaluée Exploitée

    SolarWinds Web Help Desk

    SolarWinds Web Help Desk Hardcoded Credential Vulnerability — SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.