Veille CVE

Semaine du 14 octobre au 20 octobre 2024

4 CVE

Critique 3 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Tri : plus récentes
  1. CVE-2024-40711 9.8 Critique Exploitée Rançongiciel

    Veeam Backup and Recovery · veeam backup_\&_replication · Veeam veeam backup \& replication

    A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).

  2. CVE-2024-9680 9.8 Critique Exploitée Rançongiciel

    mozilla firefox · Mozilla Firefox ESR · mozilla thunderbird · mozilla firefox_esr

    An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

  3. CVE-2024-28987 9.1 Critique Exploitée

    SolarWinds Web Help Desk · solarwinds webhelpdesk

    The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

  4. CVE-2024-30088 7.0 Élevée Exploitée Rançongiciel

    Microsoft Windows 10 Version 1507 · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Windows Kernel Elevation of Privilege Vulnerability