Veille CVE

Semaine du 11 septembre au 17 septembre 2023

3 CVE

Critique 0 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-26369 7.8 Élevée Exploitée

    Adobe Acrobat Reader · Adobe acrobat · Adobe acrobat dc · Adobe acrobat reader dc

    Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  2. CVE-2023-36802 7.8 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows Server 2022

    Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  3. CVE-2023-41990 7.8 Élevée Exploitée

    Apple iOS and iPadOS · Apple tvOS · Apple macOS · Apple watchOS

    The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.