CVE-2023-41992

CVE-2023-41992 is a kernel privilege-escalation flaw in Apple OSes (iOS, iPadOS, macOS) affecting kernel IPC/right handling. The connected docs describe a scenario where an entry without a valid port type can be corrupted during ipc_right_copyout/destroy, potentially allowing a local attacker to ...

CVE-2023-41991

A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...

CVE-2023-41991

A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...

macOS 12.x < 12.7 Multiple Vulnerabilities (HT213932)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.7. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and...

CVE-2023-5074

creationtimestamp| type| source ---|---|--- 2023-09-20 20:30:18+00:00| seen| https://t.me/cibsecurity/70807 2023-09-30 02:04:21+00:00| published-proof-of-concept| https://t.me/codeb0ss/1195 2023-10-01 12:50:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9121 2023-10-...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-28434 MinIO Security Feature Bypass Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risk...

NVIDIA Cumulus Linux Security Vulnerability

NVIDIA Cumulus Linux is a powerful open network operating system from NVIDIA. A security vulnerability exists in NVIDIA Cumulus Linux. An attacker has exploited the vulnerability to cause a denial of service...

CISA Adds Eight Known Exploited Vulnerabilities to Catalog

CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability CVE-2017-6884 Zyxel EMG2926 Route...

Fedora: Security Advisory (FEDORA-2023-6bdc468df7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-d79ff22c5b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft 3D Viewer Remote Code Execution Vulnerability (CNVD-2023-74906)

Microsoft 3D Viewer is a simplified and fast graphics editing application from Microsoft. A remote code execution vulnerability exists in Microsoft 3D Viewer, which can be exploited by an attacker to execute code on the target host...

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-72227)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

Microsoft 3D Builder Remote Code Execution Vulnerability (CNVD-2023-74907)

Microsoft 3D Builder is a tool for creating models and 3D printing from Microsoft. A remote code execution vulnerability exists in Microsoft 3D Builder, which can be exploited by an attacker to execute arbitrary code on a system...

File Upload Vulnerability in Isthmus Electronic Document Security Management System (CDG)

Beijing Yisaitong Science and Technology Development Limited Liability Company is a company that operates in the following areas: general items: technical services, technology development, technology consulting, technology exchanges, technology transfer, technology promotion and so on. A file...

Microsoft 3D Viewer Remote Code Execution Vulnerability (CNVD-2023-74904)

Microsoft 3D Viewer is a simplified and fast graphics editing application from Microsoft. A remote code execution vulnerability exists in Microsoft 3D Viewer, which can be exploited by an attacker to execute code on the target host...

Microsoft Visual Studio Code Remote Code Execution Vulnerability (CNVD-2023-72223)

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-72224)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

Microsoft Office Spoofing Vulnerability (CNVD-2024-02719)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office has a spoofing vulnerability that can be exploited by attackers to conduct spoofing...

Mozilla Firefox ESR Security Advisories (MFSA2023-29, MFSA2023-12) - Windows

Mozilla Firefox ESR is prone to heap buffer vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Siemens Teamcenter Visualization and JT2Go Out-of-Bounds Write Vulnerability (CNVD-2023-69808)

Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios.Siemens JT2GO is a JT file viewer. An out-of-bounds write vulnerability exists in Siemens Teamcenter Visualization and JT2Go, which can be exploited by an attacker to execute code ...