Veille CVE

Mercredi 7 janvier 2026

2 CVE

  1. CVE-2025-37164 – Non évaluée Exploitée

    Hewlett Packard Enterprise (HPE) OneView

    Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability — Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution.

  2. CVE-2009-0556 – Non évaluée Exploitée

    Microsoft Office

    Microsoft Office PowerPoint Code Injection Vulnerability — Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.