Veille CVE

Septembre 2022

4 CVE sur 8

Critique 2 Élevée 4 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2022-20775 7.8 Élevée Exploitée

    Cisco Catalyst SD-WAN · Cisco Catalyst SD-WAN Manager · Cisco SD-WAN vContainer · Cisco SD-WAN vEdge Cloud

    A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF

  2. CVE-2022-3038 8.8 Élevée Exploitée

    google chrome · fedoraproject fedora

    Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  3. CVE-2022-32917 7.8 Élevée Exploitée

    Apple iOS · Apple macOS · Apple ipados · Apple iphone os

    The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

  4. CVE-2022-37969 7.8 Élevée Exploitée Rançongiciel

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows 10 Version 21H1

    Windows Common Log File System Driver Elevation of Privilege Vulnerability