CVE Vulnerability Advisory Database

[Affected Scope] Multiple Windows operating system versions including Windows 7, 8.1, 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022

[Impact] A local authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the official cumulative security updates provided by Microsoft and restrict unnecessary local user accounts and privileges

[Affected Scope] On-premises Microsoft Exchange Server 2013, 2016, and 2019 versions lacking the latest cumulative and security updates

[Impact] Authenticated remote attackers can exploit untrusted deserialization in the Exchange PowerShell backend to execute arbitrary commands with SYSTEM privileges

[Mitigation] Apply official Microsoft security updates immediately, or implement IIS URL Rewrite rules and restrict Remote PowerShell access as temporary workarounds

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 105.0.5195.102

[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code on the host system via crafted Mojo IPC messages

[Mitigation] Immediately update Google Chrome and all Chromium-based browsers to version 105.0.5195.102 or later

[Affected Scope] HelpSystems Cobalt Strike through version 4.7 (specifically affecting the Teamserver component)

[Impact] A remote attacker can execute arbitrary HTML/JS code within the Cobalt Strike operator console by spoofing the username field in a beacon payload, potentially leading to session hijacking or information disclosure

[Mitigation] Immediately upgrade Cobalt Strike to the official patched version 4.7.1 or higher

[Affected Scope] Almost all active versions of Windows OS, including Windows 7, 8.1, 10, 11, and Windows Server 2008 through 2022.

[Impact] A local attacker can exploit this vulnerability to gain SYSTEM privileges, leading to complete compromise of the target system.

[Mitigation] Immediately apply the September 2022 Microsoft security updates and monitor unpatched assets for anomalous local execution.

[Affected Scope] QNAP Photo Station running on QTS 5.0.1, 5.0.0, 4.5.x, 4.3.6, 4.3.3, and 4.2.6

[Impact] Unauthenticated remote attackers can modify critical system files, potentially leading to complete device compromise

[Mitigation] Immediately update Photo Station to the patched versions (6.1.2, 6.0.22, 5.7.18, 5.4.15, 5.2.14 or later)

[Affected Scope] Contec SolarView Compact version 6.00 and prior.

[Impact] Unauthenticated attackers can execute arbitrary OS commands via the web interface, leading to complete system compromise.

[Mitigation] Apply the latest firmware updates immediately and restrict external internet access to the management interface.

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server 2008 through 2022.

[Impact] Local authenticated attackers can execute arbitrary code with kernel-level privileges (SYSTEM), leading to complete system compromise.

[Mitigation] Immediately apply the Microsoft official cumulative security updates and monitor for anomalous CLFS log creation and driver activities.

[Affected Scope] Specific versions of VMware Workspace ONE Access and Identity Manager

[Impact] Unauthenticated remote attackers with network access can execute arbitrary system commands on the target server, posing a critical risk (CVSS 9.8)

[Mitigation] Immediately apply the official security patches (VMSA-2022-0011) or implement temporary workarounds to restrict external access

[Affected Scope] Google Chrome users on desktop platforms prior to version 98.0.4758.102

[Impact] A remote attacker can exploit heap corruption and potentially execute arbitrary code by enticing a user to visit a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (98.0.4758.102 or higher)

[Affected Scope] Apple iOS versions prior to 15.3, iPadOS versions prior to 15.3, macOS Big Sur versions prior to 11.6.3, and macOS Monterey versions prior to 12.2

[Impact] A malicious application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official software updates provided by Apple to patch the vulnerable kernel components

[Affected Scope] WatchGuard Firebox and XTM appliances running Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3

[Impact] A remote attacker with low-privileged credentials can exploit exposed management access to elevate privileges and establish a fully privileged management session

[Mitigation] Immediately upgrade Fireware OS to the patched versions and restrict management interface access from the external internet

[Affected Scope] Microsoft Windows operating systems utilizing Windows Runtime (WinRT), including Windows 10, Windows 11, and Windows Server 2016/2019/2022

[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted file

[Mitigation] Apply the official Microsoft Cumulative Updates immediately and restrict execution of untrusted files

[Affected Scope] Ivanti Endpoint Manager Cloud Services Appliance (CSA) versions 4.5 and 4.6

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with limited privileges ('nobody') by sending specially crafted HTTP requests.

[Mitigation] Immediately apply the official security patches provided by Ivanti and restrict access to the CSA management interface from the public internet.

[Affected Scope] Sitecore Experience Platform (XP) 7.5 Initial Release to Sitecore XP 8.2 Update-7.

[Impact] Unauthenticated remote attackers can execute arbitrary commands with system privileges on the hosting server by sending specially crafted serialized payloads.

[Mitigation] Apply official security patches immediately or restrict external access to the vulnerable '/sitecore/shell/ClientBin/Reporting/ReportService.asmx' endpoint.

[Affected Scope] DrayTek VigorConnect version 1.6.0-B3 and prior

[Impact] Unauthenticated remote attackers can download arbitrary system files with root privileges, leading to full exposure of sensitive host operating system data

[Mitigation] Immediately upgrade VigorConnect to the latest secure version and restrict access to the management interface from the public internet

[Affected Scope] Microsoft Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the Win32k kernel driver

[Impact] Local attackers can execute arbitrary code in kernel mode, escalating privileges from a standard user to SYSTEM, with active exploitation observed in the wild by APT groups

[Mitigation] Immediately apply the official Microsoft Latest Cumulative Update (LCU) and restrict local execution privileges on unpatched systems

[Affected Scope] Apple WebKit engine in versions prior to iOS 14.5.1, iPadOS 14.5.1, macOS Big Sur 11.3.1, watchOS 7.4.1, and tvOS 14.6

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution, with active exploitation reported in the wild

[Mitigation] Immediately update Apple operating systems to the latest patched versions (iOS 14.5.1, macOS 11.3.1, or later) using official software update channels

[Affected Scope] Zoho ManageEngine ADSelfService Plus version 6113 and prior

[Impact] Unauthenticated remote attackers can bypass REST API authentication and execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately upgrade to build 6114 or later and inspect systems for Indicators of Compromise (IoCs)

[Affected Scope] Adobe Acrobat Reader DC and Acrobat versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier), and 2017.011.30194 (and earlier)

[Impact] Unauthenticated attackers can execute arbitrary code in the context of the current user by tricking a victim into opening a crafted malicious PDF file

[Mitigation] Immediately apply the official Adobe security patches (APSB21-29) and upgrade to the latest secure versions