Veille CVE

Juillet 2023

8 CVE

Critique 5 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-38606 5.5 Moyenne Exploitée

    Apple tvOS · Apple iOS and iPadOS · Apple macOS · Apple watchOS

    This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.

  2. CVE-2023-35078 9.8 Critique Exploitée Rançongiciel

    Ivanti Endpoint Manager Mobile · ivanti endpoint_manager_mobile

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.

  3. CVE-2023-38203 9.8 Critique Exploitée Rançongiciel

    Adobe ColdFusion

    Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

  4. CVE-2023-3519 9.8 Critique Exploitée Rançongiciel

    Citrix NetScaler ADC · Citrix NetScaler Gateway · Citrix netscaler application delivery controller

    Unauthenticated remote code execution

  5. CVE-2023-29300 9.8 Critique Exploitée Rançongiciel

    Adobe ColdFusion

    Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

  6. CVE-2023-36884 7.5 Élevée Exploitée Rançongiciel

    Microsoft Windows 10 Version 1507 · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Windows Search Remote Code Execution Vulnerability

  7. CVE-2023-35311 8.8 Élevée Exploitée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office 2019 · Microsoft Outlook 2016

    Microsoft Outlook Security Feature Bypass Vulnerability

  8. CVE-2023-24489 9.8 Critique Exploitée

    Citrix ShareFile Storage Zones Controller

    A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.