Veille CVE

Avril 2022

4 CVE sur 10

Critique 4 Élevée 4 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2022-27925 7.2 Élevée Exploitée Rançongiciel

    Synacor zimbra collaboration suite

    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.

  2. CVE-2022-27924 7.5 Élevée Exploitée Rançongiciel

    Synacor zimbra collaboration suite

    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.

  3. CVE-2022-24513 7.8 Élevée

    Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) · Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) · Microsoft Visual Studio 2019 for Mac version 8.10

    Visual Studio Elevation of Privilege Vulnerability

  4. CVE-2022-0609 8.8 Élevée Exploitée

    Google Chrome

    Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.