Veille CVE

Semaine du 30 juin au 6 juillet 2025

4 CVE

Critique 1 Élevée 0 Moyenne 2 Faible 0 Non évaluée 1 Tri : plus récentes
  1. CVE-2025-6554 – Non évaluée Exploitée

    Google Chromium V8

    Google Chromium V8 Type Confusion Vulnerability — Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  2. CVE-2025-48928 4.0 Moyenne Exploitée

    TeleMessage service · Smarsh telemessage

    The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.

  3. CVE-2025-48927 5.3 Moyenne Exploitée

    TeleMessage service · Smarsh telemessage

    The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.

  4. CVE-2025-6543 9.8 Critique Exploitée

    NetScaler ADC · NetScaler Gateway · Citrix netscaler application delivery controller · Citrix netscaler gateway

    Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server