CVE Vulnerability Advisory Database

[Affected Scope] Zimbra Collaboration Suite (ZCS) 8.8.15 versions prior to Patch 41 utilizing the Classic Web Client

[Impact] Attackers can execute arbitrary JavaScript in the victim's browser session, leading to session hijacking, credential theft, and unauthorized access to mailboxes

[Mitigation] Apply the official Zimbra security patch (8.8.15 Patch 41 or higher) immediately, or implement WAF rules to block malicious query parameters

[Affected Scope] Apple iOS and iPadOS prior to 15.7.8 / 16.6, macOS Big Sur prior to 11.7.9, macOS Monterey prior to 12.6.8, macOS Ventura prior to 13.5, tvOS prior to 16.6, and watchOS prior to 9.6

[Impact] A local application can bypass kernel memory protections and modify sensitive kernel states, leading to complete system compromise and arbitrary code execution

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 15.7.8 / 16.6, macOS 13.5, etc.) and enforce updates via MDM

[Affected Scope] Apple iOS before 16.6, iPadOS before 16.6, macOS Ventura before 13.5, Safari before 16.5.2, tvOS before 16.6, and watchOS before 9.6

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) within the sandbox context, and this vulnerability has been actively exploited in the wild

[Mitigation] Immediately apply the official software updates provided by Apple to patch the operating systems and Safari browser

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM, formerly MobileIron Core) versions 11.4, 11.10, 11.11, and all older/supported releases

[Impact] Unauthenticated remote attackers can bypass authentication to access restricted API endpoints, allowing them to harvest sensitive personally identifiable information (PII) or create unauthorized administrative accounts

[Mitigation] Immediately apply the official security patches or upgrade to Ivanti EPMM version 11.12 or higher, and restrict external access to administrative interfaces

[Affected Scope] Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier), and 2023u1 (and earlier)

[Impact] Unauthenticated remote attackers can exploit a Deserialization of Untrusted Data vulnerability (CWE-502) to execute arbitrary code with system privileges

[Mitigation] Immediately apply the official Adobe security patches (APSB23-41), restrict external access, and enable WAF rules

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured as a SAML SP or SAML IdP

[Impact] Unauthenticated remote attackers can execute arbitrary code with elevated privileges on the appliance, leading to full system compromise

[Mitigation] Immediately apply the official security patches provided by Citrix and run compromise assessment scripts to detect potential Indicators of Compromise (IoCs)

[Affected Scope] Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier), and 2023.0.0.330468 (and earlier)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending malicious serialized data

[Mitigation] Immediately apply the official Adobe security patch (APSB23-40) and restrict external access to serialization endpoints

[Affected Scope] Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier), and 2023.0.0.330468 (and earlier)

[Impact] Unauthenticated remote attackers can bypass security controls to access administrative CFM and CFC endpoints, potentially leading to full system compromise

[Mitigation] Apply the official Adobe security patches (APSB23-40) immediately and restrict external access to the ColdFusion Administrator interface

[Affected Scope] All endpoint systems running Microsoft Windows and Microsoft Office suites

[Impact] Remote attackers can execute arbitrary code with system privileges via specially crafted documents, leading to full system compromise

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or implement the registry-based workaround

[Affected Scope] Most major versions of Windows operating systems, including Windows 10, 11, and Windows Server 2008 through 2022

[Impact] A local authenticated attacker with low privileges can manipulate file system links to execute arbitrary code with SYSTEM privileges, leading to full system compromise

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft, or temporarily disable the WER service and restrict file link creation privileges

[Affected Scope] Broad range of Microsoft Office products including Microsoft Outlook 2013, 2016, 2019, 2021, and Microsoft 365 Apps for Enterprise

[Impact] Attackers can bypass Outlook security warning prompts via specially crafted links, potentially leading to subsequent Remote Code Execution (RCE)

[Mitigation] Immediately apply the official Microsoft security patches and restrict untrusted link execution via Group Policy (GPO) or registry hardening

[Affected Scope] All supported versions of Windows Operating Systems, including Windows 10, Windows 11, and Windows Server

[Impact] Attackers can bypass the Windows SmartScreen warning dialog when executing downloaded malicious files, leading to immediate code execution without user consent

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict execution of untrusted files

[Affected Scope] Windows client and server operating systems utilizing the MSHTML platform

[Impact] Attackers can bypass security boundaries (including AppContainer restrictions) and execute arbitrary code with the privileges of the logged-in user by tricking them into opening crafted files

[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict opening untrusted email attachments or web links

[Affected Scope] Citrix ShareFile Storage Zones Controller versions prior to 5.11.24

[Impact] Unauthenticated remote attackers can exploit a padding oracle vulnerability to bypass authentication, upload arbitrary files, and execute remote code with SYSTEM privileges

[Mitigation] Immediately upgrade customer-managed Storage Zones Controllers to version 5.11.24 or later, and restrict external access

[Affected Scope] Zimbra Collaboration Suite (ZCS) version 8.8.15

[Impact] A remote authenticated attacker can execute arbitrary code and hijack sessions by injecting malicious scripts into the '/h/autoSaveDraft' function

[Mitigation] Immediately apply the official Zimbra security patches and restrict access to the affected endpoint using WAF rules

[Affected Scope] Android 13 operating system (Android-13, Android ID: A-251586912)

[Impact] Attackers can hide mandatory foreground service notifications without user interaction, enabling stealthy background execution and unauthorized local information disclosure

[Mitigation] Apply the official June 2023 (or later) Android security patch and restrict notification permissions for untrusted applications

[Affected Scope] Systems running iOS/iPadOS prior to 16.5.1, iOS/iPadOS prior to 15.7.7, macOS Ventura prior to 13.4.1, and Safari prior to 16.5.1

[Impact] Processing maliciously crafted web content may lead to memory corruption, allowing remote attackers to execute arbitrary code on the target device

[Mitigation] Immediately apply the official software updates provided by Apple to patch the operating system and Safari browser

[Affected Scope] iOS versions prior to 15.7.7 and 16.4, iPadOS prior to 15.7.7 and 16.4, macOS Ventura prior to 13.3, and Safari prior to 16.4

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution and complete system compromise

[Mitigation] Immediately apply official Apple software updates to secure versions (iOS 15.7.7/16.4, macOS Ventura 13.3, etc.)

[Affected Scope] Systems running iOS/iPadOS prior to 15.7.7 and 16.5.1, macOS Big Sur/Monterey/Ventura prior to specific patched releases, and watchOS prior to 8.8.1 and 9.5.2

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation has been reported in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (e.g., iOS 16.5.1, macOS 13.4.1)

[Affected Scope] iOS/iPadOS 15 and 16, macOS Ventura, watchOS, tvOS, and Safari versions prior to 16.5

[Impact] A remote attacker can bypass the Web Content sandbox and potentially execute arbitrary code on the host system due to a bounds check validation flaw, which is actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 16.5, macOS 13.4, Safari 16.5, etc.)