CVE Vulnerability Advisory Database

[Affected Scope] iOS/iPadOS 15 and 16, macOS Ventura, watchOS, tvOS, and Safari versions prior to 16.5

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE), and Apple is aware of active exploitation in the wild

[Mitigation] Immediately update operating systems and Safari to the latest patched versions using Apple's official software update mechanism

[Affected Scope] All Apple devices running versions prior to iOS/iPadOS 15.7.6 and 16.5, macOS Ventura 13.4, tvOS 16.5, watchOS 9.5, and Safari 16.5

[Impact] Processing maliciously crafted web content may lead to out-of-bounds memory access, disclosing sensitive system information and enabling further sandbox escape or privilege escalation

[Mitigation] Immediately apply official Apple software updates to upgrade to iOS 16.5, macOS Ventura 13.4, Safari 16.5, or later

[Affected Scope] PaperCut NG and MF systems with an active administrator login session.

[Impact] Attackers can trick administrators into clicking malicious links, leading to unauthorized security setting modifications and arbitrary code execution.

[Mitigation] Apply the official vendor security patches immediately and restrict external access to the admin interface.

[Affected Scope] Zyxel NAS326 (prior to V5.21(AAZF.14)C0), NAS540 (prior to V5.21(AATB.11)C0), and NAS542 (prior to V5.21(ABAG.11)C0)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted HTTP requests, leading to complete system compromise

[Mitigation] Apply the official firmware updates immediately and restrict external internet access to the NAS management interface

[Affected Scope] Systems running unpatched versions impacted by CVE-2023-29360

[Impact] Microsoft Streaming Service Elevation of Privilege Vulnerability...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Microsoft SharePoint Server 2019 and SharePoint Server Subscription Edition.

[Impact] An unauthenticated attacker can send a specially crafted JWT token to bypass authentication, gain administrator privileges, and potentially chain it with RCE vulnerabilities.

[Mitigation] Apply the official Microsoft Cumulative Update (CU) immediately and restrict unauthorized access at the network and IIS levels prior to patching.

[Affected Scope] Guest virtual machines running on VMware ESXi hosts with vulnerable versions of VMware Tools or open-vm-tools installed

[Impact] A fully compromised ESXi host can bypass host-to-guest authentication, compromising the confidentiality and integrity of the guest operating system

[Mitigation] Immediately upgrade VMware Tools and open-vm-tools to the latest patched versions provided by VMware and OS vendors

[Affected Scope] FortiOS versions 7.2.4 and below, 7.0.11 and below, 6.4.12 and below, 6.0.16 and below; FortiProxy versions 7.2.3 and below, 7.0.9 and below, 2.0.12 and below, and all 1.2/1.1 versions with SSL-VPN enabled

[Impact] An unauthenticated remote attacker can execute arbitrary code or commands with root privileges on the target appliance via specifically crafted HTTP requests

[Mitigation] Immediately upgrade FortiOS and FortiProxy to the patched versions, or disable the SSL-VPN service as a temporary workaround

[Affected Scope] VMware Aria Operations for Networks (formerly vRealize Network Insight) 6.x versions

[Impact] Unauthenticated remote attackers with network access can execute arbitrary commands with root privileges, leading to complete system compromise

[Mitigation] Apply the official VMware security patches (VMSA-2023-0012) immediately and restrict access to management interfaces

[Affected Scope] TP-Link TL-WR940N (V2/V4), TL-WR841N (V8/V10), and TL-WR740N (V1/V2) routers

[Impact] Authenticated attackers can execute arbitrary system commands and gain full control of the device via a vulnerable web component

[Mitigation] Apply the latest firmware updates immediately, disable remote WAN management, and change default administrator credentials

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 114.0.5735.110

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (114.0.5735.110 or higher) and enforce automatic update policies

[Affected Scope] All MOVEit Transfer versions prior to 2021.0.6, 2021.1.4, 2022.0.4, 2022.1.5, and 2023.0.1, including older unsupported versions

[Impact] Unauthenticated remote attackers can manipulate the database via HTTP/HTTPS requests, potentially leading to remote code execution (RCE) and unauthorized data exfiltration

[Mitigation] Immediately upgrade to the patched versions, restrict external HTTP/HTTPS access to the server, and conduct a thorough compromise assessment

[Affected Scope] All Openfire versions from 3.10.0 (released in April 2015) up to 4.6.7 and 4.7.4

[Impact] Unauthenticated remote attackers can bypass authentication via path traversal, gain administrative access, and potentially execute arbitrary code (RCE) by uploading malicious plugins

[Mitigation] Immediately upgrade to patched versions of Openfire (4.6.8, 4.7.5, or 4.8.0+) or apply strict access control and WAF rules to block path traversal patterns

[Affected Scope] Barracuda Email Security Gateway (appliance form factor only) versions 5.1.3.001 through 9.2.0.006

[Impact] A remote attacker can execute arbitrary system commands with the privileges of the ESG product by sending a specially crafted .tar archive, leading to complete system compromise

[Mitigation] Verify the automatic application of patch BNSF-36456, perform a thorough compromise assessment (IoC search), and immediately replace compromised appliances

[Affected Scope] Apache RocketMQ versions 5.1.0 and below, and versions 4.9.5 and below

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with the privileges of the RocketMQ process, leading to full system compromise

[Mitigation] Immediately upgrade to RocketMQ version 5.1.1 or above (for 5.x) or 4.9.6 or above (for 4.x)

[Affected Scope] Specific firmware versions of Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG series

[Impact] Unauthenticated remote attackers can cause denial-of-service (DoS) conditions or execute arbitrary code on the affected device

[Mitigation] Immediately upgrade the device firmware to the latest patched version (v5.36 Patch 2 or v4.73 Patch 2 or higher)

[Affected Scope] Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG series firmware within specific version ranges.

[Impact] An unauthenticated remote attacker can trigger denial-of-service (DoS) conditions or execute arbitrary code on the affected device.

[Mitigation] Immediately upgrade to the latest patched firmware version provided by the vendor and restrict external access to management interfaces.

[Affected Scope] Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the Win32k kernel driver.

[Impact] A local attacker can exploit a Use-After-Free (UAF) vulnerability to corrupt kernel memory, leading to arbitrary code execution with SYSTEM privileges.

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and enhance monitoring for Indicators of Compromise (IoCs).

[Affected Scope] Microsoft SharePoint Server 2016, 2019, and Subscription Edition

[Impact] An authenticated attacker with high privileges (Site Owner/Administrator) can execute arbitrary code in the context of the server, leading to complete system compromise

[Mitigation] Apply the official Microsoft security patches immediately and restrict access to the SharePoint administration interface from untrusted networks

[Affected Scope] Samsung Android mobile devices running firmware versions prior to the SMR May-2023 Release 1 security update

[Impact] A privileged local attacker can read exposed kernel pointers in system log files to bypass ASLR (Address Space Layout Randomization), facilitating subsequent kernel-level code execution

[Mitigation] Apply the Samsung May 2023 security update (SMR May-2023 Release 1) or later, and restrict access to sensitive system logs