Veille CVE

Semaine du 2 octobre au 8 octobre 2023

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-42824 7.8 Élevée Exploitée

    Apple iOS and iPadOS · Apple ipados · Apple iphone os

    The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.

  2. CVE-2023-4911 7.8 Élevée Exploitée

    Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 8.6 Extended Update Support · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 9.0 Extended Update Support

    A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.