Veille CVE

Samedi 15 août 2026

3 CVE sur 3

Critique 0 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2022-21882 7.8 Élevée Exploitée Rançongiciel

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows 10 Version 1909

    Win32k Elevation of Privilege Vulnerability

  2. CVE-2021-4034 7.8 Élevée Exploitée Rançongiciel

    polkit · Polkit project polkit · Redhat enterprise linux server update services for sap solutions · Redhat enterprise linux

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

  3. CVE-2020-0618 8.8 Élevée Exploitée Rançongiciel

    Microsoft SQL Server · Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR) · Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU) · Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)

    A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.