Veille CVE

Mars 2022

3 CVE sur 7

Critique 3 Élevée 3 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2022-22587 9.8 Critique Exploitée

    Apple iOS and iPadOS · Apple macOS · Apple ipados · Apple iphone os

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

  2. CVE-2022-26318 9.8 Critique Exploitée

    Watchguard fireware

    On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

  3. CVE-2022-22947 10.0 Critique Exploitée

    Spring Cloud Gateway · Vmware spring cloud gateway · Oracle commerce guided search · Oracle communications cloud native core binding support function

    In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.