Veille CVE

Semaine du 14 avril au 20 avril 2025

4 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2025-31201 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Arbitrary Read and Write Vulnerability — Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.

  2. CVE-2025-31200 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability — Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.

  3. CVE-2025-24054 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability — Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.

  4. CVE-2021-20035 6.5 Moyenne Exploitée

    SonicWall SMA100 · Sonicwall sma 200 firmware · Sonicwall sma 210 firmware · Sonicwall sma 400 firmware

    Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.