Veille CVE

Janvier 2024

4 CVE sur 6

Critique 1 Élevée 4 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2024-21893 8.2 Élevée Exploitée Rançongiciel

    Ivanti ICS · Ivanti IPS · ivanti connect_secure · ivanti policy_secure

    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

  2. CVE-2024-23222 8.8 Élevée Exploitée

    Apple Safari · Apple iOS and iPadOS · Apple macOS · Apple tvOS

    A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, 2024. This update brings that fix to devices that cannot update to the latest iOS version.

  3. CVE-2023-41974 7.8 Élevée Exploitée

    Apple iOS and iPadOS · Apple ipados · Apple iphone os

    A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.

  4. CVE-2022-2586 7.8 Élevée Exploitée

    The Linux Kernel Organization linux · linux_kernel · Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · Siemens simatic s7-1500 tm mfp firmware

    It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.