Veille CVE

Semaine du 12 août au 18 août 2024

3 CVE sur 3

Critique 0 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2024-7262 7.8 Élevée Exploitée

    Kingsoft WPS Office · kingsoft wps_office

    Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document

  2. CVE-2024-38189 8.8 Élevée Exploitée

    Microsoft Office 2019 · Microsoft 365 Apps for Enterprise · Microsoft Project 2016 · Microsoft Office LTSC 2021

    Microsoft Project Remote Code Execution Vulnerability

  3. CVE-2024-7694 7.2 Élevée Exploitée

    TeamT5 ThreatSonar Anti-Ransomware

    ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.