CVE Vulnerability Advisory Database

[Affected Scope] Mitel MiVoice Connect 19.3 (version 22.22.6100.0 and prior)

[Impact] Authenticated attackers can execute arbitrary code via crafted database inputs, potentially leading to full system compromise

[Mitigation] Apply the official security patches provided in Mitel Advisory 22-0008 immediately and restrict database access

[Affected Scope] Edge Gateway component of Mitel MiVoice Connect through 19.3 (version 22.22.6100.0 and prior)

[Impact] An authenticated attacker with internal network access can execute arbitrary OS commands with system privileges due to insufficient validation of URL parameters

[Mitigation] Apply the official security patches provided by Mitel immediately, or restrict network access to the Edge Gateway management interface

[Affected Scope] Windows systems running Audinate Dante Discovery services and utilizing the mDNSResponder.exe component

[Impact] Local attackers can leverage the legitimate, signed executable to load malicious DLLs, leading to arbitrary code execution with elevated privileges

[Mitigation] Apply official security patches from Audinate, restrict write permissions on the mDNSResponder execution directory, and monitor for unauthorized DLL loads

[Affected Scope] Windows client and server environments utilizing the Windows Scripting Engine (JScript9)

[Impact] Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the active user via crafted web content or documents

[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of legacy JScript engines

[Affected Scope] Microsoft Windows operating systems including Windows 10, 11, and Windows Server 2012, 2016, 2019, 2022 utilizing the CNG Key Isolation service

[Impact] A local authenticated attacker can execute arbitrary code with SYSTEM privileges by running a specially crafted application, leading to complete system compromise

[Mitigation] Apply the official Microsoft Latest Cumulative Update (LCU) immediately and restrict local logon privileges for non-administrative users

[Affected Scope] Microsoft Windows operating systems, including Windows 10, 11, and Windows Server editions

[Impact] Attackers can bypass the Mark of the Web (MotW) security warning, allowing malicious files to execute without triggering SmartScreen alerts

[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict execution of untrusted files

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 on-premises environments.

[Impact] An authenticated attacker can leverage Remote PowerShell sessions to elevate privileges to SYSTEM, potentially leading to Remote Code Execution (RCE).

[Mitigation] Immediately apply the latest Cumulative Updates (CU) and Security Updates (SU) provided by Microsoft, and restrict unnecessary Remote PowerShell access.

[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with the Print Spooler service enabled

[Impact] A local authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the Print Spooler service on non-printing server infrastructures

[Affected Scope] Microsoft Windows operating systems, including Windows 10, 11, and Windows Server editions

[Impact] Files downloaded from the internet may bypass the 'Mark of the Web (MotW)' flag, allowing malicious payloads to execute without SmartScreen warnings or Office Protected View restrictions

[Mitigation] Apply the latest Microsoft Cumulative Updates immediately, and restrict the extraction of untrusted archives (ZIP, ISO) until patched

[Affected Scope] Netwrix Auditor server and User Activity Video Recording agents installed on monitored systems

[Impact] Unauthenticated remote attackers can execute arbitrary code with 'NT AUTHORITY\SYSTEM' privileges on affected servers and monitored hosts

[Mitigation] Immediately upgrade Netwrix Auditor to the latest secure version and restrict network access to agent communication ports

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.87

[Impact] A remote attacker can potentially exploit heap corruption via a crafted HTML page, leading to arbitrary remote code execution (RCE) within the browser renderer process

[Mitigation] Immediately update Google Chrome to the latest stable version (107.0.5304.87 or higher) and enforce automatic updates across enterprise environments

[Affected Scope] Apple devices running iOS and iPadOS versions prior to 15.7.1 or 16.1

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete device compromise. Active exploitation has been reported in the wild

[Mitigation] Immediately update affected devices to iOS/iPadOS 15.7.1, iOS 16.1, or later versions

[Affected Scope] Android and embedded devices utilizing Arm Mali GPU Bifrost (r0p0 to r38p1, r39p0), Valhall (r19p0 to r38p1, r39p0), and Midgard (r4p0 to r32p0) drivers

[Impact] Local unprivileged attackers can exploit a Use-After-Free (UAF) condition in GPU memory operations to gain arbitrary kernel code execution and full root privileges

[Mitigation] Apply the latest security patches provided by chipset vendors and OEMs, and immediately upgrade vulnerable driver versions

[Affected Scope] D-Link DSL-2750B devices running firmware versions prior to 1.05

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the 'cli' parameter in login.cgi

[Mitigation] Apply the official firmware patch (v1.05 or later) or immediately disable WAN-side access to the web management interface

[Affected Scope] Oracle E-Business Suite (EBS) versions 12.2.3 through 12.2.11, specifically the Upload component of Web Applications Desktop Integrator.

[Impact] Unauthenticated remote attackers can exploit this vulnerability via HTTP to upload arbitrary files and achieve full system takeover (RCE).

[Mitigation] Immediately apply the official Oracle Critical Patch Update (CPU) patches and restrict external access to vulnerable endpoints.

[Affected Scope] FortiOS (7.2.0 to 7.2.1, 7.0.0 to 7.0.6), FortiProxy (7.2.0, 7.0.0 to 7.0.6), FortiSwitchManager (7.2.0, 7.0.0)

[Impact] An unauthenticated remote attacker can bypass authentication via specially crafted HTTP/HTTPS requests, gaining full administrative access to perform arbitrary operations

[Mitigation] Immediately upgrade to patched versions (FortiOS 7.2.2 / 7.0.7 or higher) or disable HTTP/HTTPS administrative access from untrusted networks

[Affected Scope] Multiple Windows operating system versions including Windows 7, 8.1, 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022

[Impact] A local authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the official cumulative security updates provided by Microsoft and restrict unnecessary local user accounts and privileges

[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with active Print Spooler service

[Impact] Local authenticated attackers can execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the Print Spooler service on non-printing servers

[Affected Scope] On-premises Microsoft Exchange Server 2013, 2016, and 2019 versions lacking the latest cumulative and security updates

[Impact] Authenticated remote attackers can exploit untrusted deserialization in the Exchange PowerShell backend to execute arbitrary commands with SYSTEM privileges

[Mitigation] Apply official Microsoft security updates immediately, or implement IIS URL Rewrite rules and restrict Remote PowerShell access as temporary workarounds

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 On-Premises environments

[Impact] Authenticated attackers can exploit this SSRF vulnerability to access backend APIs, leading to Remote Code Execution (RCE) and complete system compromise

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or implement IIS URL Rewrite rules as a temporary workaround