Veille CVE

Juin 2025

6 CVE sur 15

Critique 5 Élevée 6 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-32463 7.8 Élevée Exploitée

    Sudo project Sudo · Canonical ubuntu linux · Debian debian linux · Opensuse leap

    Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

  2. CVE-2025-6426 8.8 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    The executable file warning did not warn users before opening files with the `terminal` extension. *This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.

  3. CVE-2025-5777 7.5 Élevée Exploitée Rançongiciel

    NetScaler ADC · NetScaler Gateway · Citrix netscaler application delivery controller · Citrix netscaler gateway

    Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

  4. CVE-2025-33073 8.8 Élevée Exploitée

    Microsoft Windows 10 Version 1507 · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

  5. CVE-2025-21479 8.6 Élevée Exploitée

    Qualcomm, Inc. Snapdragon · Qualcomm aqt1000 firmware · Qualcomm fastconnect 6200 firmware · Qualcomm fastconnect 6700 firmware

    Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

  6. CVE-2025-21480 8.6 Élevée Exploitée

    Qualcomm, Inc. Snapdragon · Qualcomm aqt1000 firmware · Qualcomm fastconnect 6200 firmware · Qualcomm fastconnect 6700 firmware

    Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.