CVE Vulnerability Advisory Database

[Affected Scope] Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0

[Impact] An attacker can achieve arbitrary remote code execution (RCE) within the browser's content process, with active exploitation reported in the wild

[Mitigation] Immediately update all affected installations to the latest patched versions (Firefox 131.0.2+, ESR 128.3.1+, ESR 115.16.1+, Thunderbird 131.0.1+, 128.3.1+, 115.16.0+)

[Affected Scope] All supported versions of Windows client and server operating systems utilizing the MSHTML (Internet Explorer) engine.

[Impact] Attackers can bypass security warnings and spoof trusted domains to steal sensitive credentials or execute malicious payloads by tricking users into visiting crafted web content.

[Mitigation] Immediately apply the October 2024 Microsoft cumulative security updates and restrict MSHTML execution via registry hardening.

[Affected Scope] Microsoft Windows operating systems utilizing Microsoft Management Console (MMC) and .msc console files

[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a crafted .msc file

[Mitigation] Apply the official Microsoft security updates immediately and restrict the execution of untrusted .msc files

[Affected Scope] All supported versions of Microsoft Configuration Manager (formerly SCCM)

[Impact] Unauthenticated remote attackers can execute arbitrary commands on the target server and backend database by sending specially crafted requests, leading to full system compromise

[Mitigation] Immediately apply the latest cumulative updates (KB) via the Configuration Manager console and restrict database access

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-9380

[Impact] An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker wit...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Ivanti CSA (Cloud Services Appliance) versions prior to 5.0.2

[Impact] A remote authenticated attacker with administrative privileges can execute arbitrary SQL statements, potentially leading to sensitive data exposure and further system compromise.

[Mitigation] Immediately upgrade Ivanti CSA to version 5.0.2 or higher, and restrict external access to the admin console.

[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing specific HLOS (High-Level Operating System) memory drivers

[Impact] Local attackers with low privileges can trigger a Use-After-Free (UAF) condition, leading to kernel memory corruption and full local privilege escalation (LPE) to root

[Mitigation] Apply the official security patches released by OEMs (October 2024 or later) and restrict access to kernel memory drivers using strict SELinux policies

[Affected Scope] Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and fully compromise the target server by sending specially crafted inputs to the postjournal service.

[Mitigation] Immediately upgrade Zimbra to the latest patched versions (8.8.15 P46, 9.0.0 P41, 10.0.9, 10.1.1 or later), or disable the postjournal service if not required.

[Affected Scope] Ivanti Cloud Services Appliance (CSA) versions prior to 4.6 Patch 519

[Impact] Unauthenticated remote attackers can bypass authentication via path traversal to access restricted administrative endpoints, potentially leading to Remote Code Execution (RCE) when chained with other vulnerabilities

[Mitigation] Organizations utilizing Ivanti CSA 4.6 must immediately apply Patch 519 or migrate to the actively supported CSA 5.0, as the 4.6 branch has reached End-of-Life (EOL)

[Affected Scope] PTZOptics PT30X-SDI/NDI-xx camera devices running firmware versions prior to 6.3.40

[Impact] Attackers can manipulate the 'ntp_addr' configuration to execute arbitrary OS commands with system privileges when 'ntp_client' starts, which can lead to unauthenticated remote code execution when chained with CVE-2024-8956

[Mitigation] Immediately upgrade the camera firmware to version 6.3.40 or later via the official PTZOptics portal and restrict network access

[Affected Scope] PTZOptics PT30X-SDI and PT30X-NDI camera devices running firmware versions prior to 6.3.40.

[Impact] Remote, unauthenticated attackers can bypass authentication by omitting the HTTP Authorization header, leading to the exposure of sensitive configuration data, password hashes, and unauthorized configuration modifications.

[Mitigation] Immediately upgrade the camera firmware to version 6.3.40 or higher and restrict external internet access to the device.

[Affected Scope] VMware vCenter Server 7.0 and 8.0 families, VMware Cloud Foundation 4.x and 5.x families

[Impact] An unauthenticated attacker with network access can escalate privileges to root by sending a specially crafted network packet

[Mitigation] Immediately upgrade to the patched versions (vCenter 8.0 U3b or later, 7.0 U3t or later) as recommended by Broadcom

[Affected Scope] VMware vCenter Server versions 7.0 and 8.0, VMware Cloud Foundation versions 4.x and 5.x

[Impact] An unauthenticated remote attacker can trigger a heap overflow via specially crafted DCERPC packets, potentially executing arbitrary code with root privileges

[Mitigation] Immediately apply the official Broadcom security patches (vCenter 8.0 U3b / 7.0 U3s or later) and restrict network access to vCenter management ports

[Affected Scope] Ivanti Cloud Services Appliance (CSA) versions 4.6 Patch 518 and prior

[Impact] A remote authenticated attacker with admin-level privileges can inject arbitrary OS commands, leading to remote code execution and full system compromise

[Mitigation] Immediately upgrade to the supported Ivanti CSA 5.0 version or apply the latest security patches to mitigate active exploitation risks

[Affected Scope] All supported versions of Microsoft Windows client and server operating systems utilizing the MSHTML platform

[Impact] Attackers can spoof file extensions to trick users into executing malicious payloads, leading to potential Remote Code Execution (RCE)

[Mitigation] Apply the Microsoft September 2024 cumulative security updates immediately and restrict execution of untrusted files

[Affected Scope] Microsoft Publisher 2016, Office LTSC 2021, and Microsoft 365 Apps within supported lifecycles

[Impact] An attacker can bypass Office macro block policies and Mark of the Web (MOTW) security warnings to execute arbitrary code when a user opens a specially crafted Publisher file

[Mitigation] Apply the official Microsoft security updates immediately and enforce Group Policies to block macros in files originating from the Internet

[Affected Scope] Windows 10, Windows 11, and Windows Server environments with Smart App Control or Windows Defender SmartScreen enabled

[Impact] Attackers can bypass Mark of the Web (MotW) warnings, allowing malicious files to execute without triggering security prompts to the user

[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict the execution of untrusted container/shortcut files

[Affected Scope] Microsoft Windows operating systems, including Windows 10, Windows 11, and Windows Server editions

[Impact] A locally authenticated attacker can exploit flaws in the Windows Installer service to elevate privileges to NT AUTHORITY\SYSTEM and execute arbitrary code

[Mitigation] Apply the Microsoft September 2024 security updates immediately and restrict Windows Installer privileges for non-administrative users

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-40711

[Impact] A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE)....

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Cisco Smart Licensing Utility (CSLU) versions prior to 2.3.0

[Impact] Unauthenticated remote attackers can gain full administrative access to the CSLU application API using hardcoded static credentials

[Mitigation] Immediately upgrade CSLU to version 2.3.0 or later, and restrict external access to the CSLU API ports using firewalls