Veille CVE

Mardi 14 janvier 2025

4 CVE

  1. CVE-2025-21335 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability — Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.

  2. CVE-2025-21334 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability — Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.

  3. CVE-2025-21333 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability — Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.

  4. CVE-2024-55591 – Non évaluée Exploitée Rançongiciel

    Fortinet FortiOS and FortiProxy

    Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability — Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.