Veille CVE

Août 2016

6 CVE

Critique 0 Élevée 5 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2016-4657 8.8 Élevée Exploitée

    Apple iphone os

    WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

  2. CVE-2016-4656 7.8 Élevée Exploitée

    Apple iphone os

    The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  3. CVE-2016-4655 5.5 Moyenne Exploitée

    Apple iphone os

    The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

  4. CVE-2016-6367 7.8 Élevée Exploitée

    Cisco adaptive security appliance software

    Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

  5. CVE-2016-6366 8.8 Élevée Exploitée

    Cisco pix firewall software · Cisco adaptive security appliance software · Cisco asa 1000v cloud firewall software

    Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

  6. CVE-2016-3309 7.8 Élevée Exploitée Rançongiciel

    Microsoft windows 10 1507 · Microsoft windows 10 1511 · Microsoft windows 10 1607 · Microsoft windows 7

    The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.