Veille CVE

Septembre 2023

5 CVE

Critique 0 Élevée 4 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-40044 8.8 Élevée Exploitée Rançongiciel

    Progress Software Corporation WS_FTP Server · Progress ws ftp server

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

  2. CVE-2023-26369 7.8 Élevée Exploitée

    Adobe Acrobat Reader · Adobe acrobat · Adobe acrobat dc · Adobe acrobat reader dc

    Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  3. CVE-2023-36802 7.8 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows Server 2022

    Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  4. CVE-2023-36761 6.5 Moyenne Exploitée

    Microsoft Office 2019 · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Word 2016

    Microsoft Word Information Disclosure Vulnerability

  5. CVE-2023-41990 7.8 Élevée Exploitée

    Apple iOS and iPadOS · Apple tvOS · Apple macOS · Apple watchOS

    The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.