Veille CVE

Décembre 2016

3 CVE sur 4

Critique 1 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2016-7262 7.8 Élevée Exploitée

    Microsoft excel · Microsoft excel viewer · Microsoft office compatibility pack

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature Bypass Vulnerability."

  2. CVE-2016-7892 8.8 Élevée Exploitée

    Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier · Adobe flash player desktop runtime · Adobe flash player

    Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.

  3. CVE-2016-6277 8.8 Élevée Exploitée

    Netgear d6220 firmware · Netgear d6400 firmware · Netgear r6250 firmware · Netgear r6400 firmware

    NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.