Veille CVE

Semaine du 5 juin au 11 juin 2023

2 CVE

  1. CVE-2023-20887 9.8 Critique Exploitée

    Aria Operations for Networks (Formerly vRealize Network Insight) · Vmware aria operations for networks

    Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

  2. CVE-2023-3079 8.8 Élevée Exploitée

    Google Chrome · Fedoraproject fedora · Debian debian linux · Couchbase couchbase server

    Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)