Veille CVE

Décembre 2019

6 CVE

Critique 2 Élevée 4 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2019-17621 9.8 Critique Exploitée

    Dlink dir-859 firmware · Dlink dir-822 firmware · Dlink dir-823 firmware · Dlink dir-865l firmware

    The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.

  2. CVE-2019-8605 7.8 Élevée Exploitée

    Apple iOS · Apple macOS · Apple tvOS · Apple watchOS

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

  3. CVE-2019-8526 7.8 Élevée Exploitée

    Apple macOS · Apple mac os x

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.

  4. CVE-2019-8506 8.8 Élevée Exploitée

    Apple iOS · Apple tvOS · Apple watchOS · Apple Safari

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

  5. CVE-2019-1458 7.8 Élevée Exploitée Rançongiciel

    Microsoft Windows · Microsoft Windows Server · Microsoft windows 10 1507 · Microsoft windows 10 1607

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

  6. CVE-2019-7193 9.8 Critique Exploitée Rançongiciel

    QNAP NAS devices · Qnap qts

    This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.