Veille CVE

Décembre 2019

4 CVE

Critique 1 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2019-8605 7.8 Élevée Exploitée

    Apple iOS · Apple macOS · Apple tvOS · Apple watchOS

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

  2. CVE-2019-8526 7.8 Élevée Exploitée

    Apple macOS · Apple mac os x

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.

  3. CVE-2019-8506 8.8 Élevée Exploitée

    Apple iOS · Apple tvOS · Apple watchOS · Apple Safari

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

  4. CVE-2019-7193 9.8 Critique Exploitée Rançongiciel

    QNAP NAS devices · Qnap qts

    This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.