Veille CVE

Semaine du 5 janvier au 11 janvier 2026

2 CVE

  1. CVE-2009-0556 8.8 Élevée Exploitée

    Microsoft office powerpoint · Microsoft powerpoint

    Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

  2. CVE-2025-37164 – Non évaluée Exploitée

    Hewlett Packard Enterprise (HPE) OneView

    Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability — Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution.