KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Microsoft Streaming Service Elevation of Privilege Vulnerability
Wykorzystanie luki w jądrze Windows umożliwia lokalnym użytkownikom eskalację uprawnień.
Przepełnienie całkowitej liczby w Adobe Flash Player umożliwia zdalne wykonanie kodu.
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Wykorzystanie błędu use after free w Adobe Flash Player pozwala na zdalne wykonanie kodu.
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management…
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this…
Wykonanie dowolnego kodu w jądrze iOS umożliwia atakującym eskalację uprawnień lub awarię systemu.
Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote…
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a…
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully…
Błąd w Cisco ASA pozwala lokalnym użytkownikom uzyskać wyższe uprawnienia przez nieprawidłowe polecenia CLI.
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows…
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7…
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a…
Nieokreślona podatność w Adobe Reader i Flash Player umożliwia zdalne wykonanie kodu.
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
Awaria mechanizmu ochrony w MSHTML umożliwia atakującemu ominięcie zabezpieczeń.
The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue…
Obejście zabezpieczeń w Microsoft Outlook umożliwia nieautoryzowany dostęp do danych.
Wstrzyknięcie kodu w Apache ActiveMQ pozwala na zdalne wykonanie dowolnego kodu.
Wzrost uprawnień w sterownikach jądra Windows umożliwia lokalnym użytkownikom zdobycie wyższych uprawnień.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a… | Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Pilne działanie | 8,8 | 19,97 % | ||
| Microsoft Streaming Service Elevation of Privilege Vulnerability | Microsoft Streaming Service Elevation of Privilege Vulnerability |
Pilne działanie | 8,4 | 21,62 % | ||
| Wykorzystanie luki w jądrze Windows umożliwia lokalnym użytkownikom eskalację uprawnień. | Wykorzystanie luki w jądrze Windows umożliwia lokalnym użytkownikom eskalację uprawnień. |
Pilne działanie | 7,8 | 24,47 % | ||
| Przepełnienie całkowitej liczby w Adobe Flash Player umożliwia zdalne wykonanie kodu. | Przepełnienie całkowitej liczby w Adobe Flash Player umożliwia zdalne wykonanie kodu. |
Pilne działanie | 8,8 | 19,33 % | ||
| Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to… | Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage. |
Pilne działanie | 7,5 | 25,7 % | ||
| The issue was addressed with improved checks. | The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. |
Pilne działanie | 8,8 | 18,95 % | ||
| Wykorzystanie błędu use after free w Adobe Flash Player pozwala na zdalne wykonanie kodu. | Wykorzystanie błędu use after free w Adobe Flash Player pozwala na zdalne wykonanie kodu. |
Pilne działanie | 8,8 | 18,79 % | ||
| VMware ESXi contains an authentication bypass vulnerability. | VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management… |
Pilne działanie | 7,2 | 26,77 % | ||
| It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the… | It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this… |
Pilne działanie | 7,8 | 23,71 % | ||
| Wykonanie dowolnego kodu w jądrze iOS umożliwia atakującym eskalację uprawnień lub awarię systemu. | Wykonanie dowolnego kodu w jądrze iOS umożliwia atakującym eskalację uprawnień lub awarię systemu. |
Pilne działanie | 7,8 | 23,63 % | ||
| Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to… | Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote… |
Pilne działanie | 7,5 | 25,12 % | ||
| Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap… | Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Pilne działanie | 8,8 | 18,53 % | ||
| Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. | Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a… |
Pilne działanie | 8,1 | 21,78 % | ||
| A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully… |
Pilne działanie | 7,6 | 24,19 % | ||
| Błąd w Cisco ASA pozwala lokalnym użytkownikom uzyskać wyższe uprawnienia przez nieprawidłowe polecenia CLI. | Błąd w Cisco ASA pozwala lokalnym użytkownikom uzyskać wyższe uprawnienia przez nieprawidłowe polecenia CLI. |
Pilne działanie | 7,8 | 22,58 % | ||
| An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka… | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows… |
Pilne działanie | 7,8 | 22,18 % | ||
| A memory corruption issue was addressed with improved input validation. | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7… |
Pilne działanie | 7,8 | 22,01 % | ||
| A use after free issue was addressed with improved memory management. | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a… |
Pilne działanie | 8,8 | 16,34 % | ||
| Nieokreślona podatność w Adobe Reader i Flash Player umożliwia zdalne wykonanie kodu. | Nieokreślona podatność w Adobe Reader i Flash Player umożliwia zdalne wykonanie kodu. |
Pilne działanie | 7,8 | 21,2 % | ||
| A type confusion issue was addressed with improved memory handling. | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution. |
Pilne działanie | 8,8 | 16,16 % | ||
| Awaria mechanizmu ochrony w MSHTML umożliwia atakującemu ominięcie zabezpieczeń. | Awaria mechanizmu ochrony w MSHTML umożliwia atakującemu ominięcie zabezpieczeń. |
Pilne działanie | 8,8 | 15,85 % | ||
| The issue was addressed with improved bounds checks. | The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue… |
Pilne działanie | 8,6 | 16,53 % | ||
| Obejście zabezpieczeń w Microsoft Outlook umożliwia nieautoryzowany dostęp do danych. | Obejście zabezpieczeń w Microsoft Outlook umożliwia nieautoryzowany dostęp do danych. |
Pilne działanie | 8,8 | 15,52 % | ||
| Wstrzyknięcie kodu w Apache ActiveMQ pozwala na zdalne wykonanie dowolnego kodu. | Wstrzyknięcie kodu w Apache ActiveMQ pozwala na zdalne wykonanie dowolnego kodu. |
Pilne działanie | 8,8 | 15,49 % | ||
| Wzrost uprawnień w sterownikach jądra Windows umożliwia lokalnym użytkownikom zdobycie wyższych uprawnień. | Wzrost uprawnień w sterownikach jądra Windows umożliwia lokalnym użytkownikom zdobycie wyższych uprawnień. |
Pilne działanie | 7,8 | 20,47 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.