CVE Vulnerability Advisory Database

[Affected Scope] Google Chrome prior to version 103.0.5060.114 and other applications utilizing the WebRTC library

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code or cause a Denial of Service (DoS) via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to version 103.0.5060.114 or later

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 100.0.4896.127

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page to execute arbitrary code within the browser process context

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (100.0.4896.127 or higher)

[Affected Scope] Google Chrome versions prior to 99.0.4844.84 and all affected Chromium-based browsers (Edge, Brave, Opera, etc.)

[Impact] A remote attacker can exploit heap corruption via a specially crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process context

[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 99.0.4844.84 or higher)

[Affected Scope] Confluence Server and Data Center environments with Questions for Confluence app versions 2.7.34, 2.7.35, and 3.0.2 installed

[Impact] A remote, unauthenticated attacker can exploit the hardcoded 'disabledsystemuser' account to log into Confluence and access all sensitive content

[Mitigation] Immediately upgrade the Questions for Confluence app to a non-vulnerable version or disable/delete the 'disabledsystemuser' account

[Affected Scope] Zoho ManageEngine Password Manager Pro before 12101, PAM360 before 5510, and Access Manager Plus before 4303

[Impact] Unauthenticated (or authenticated for Access Manager Plus) attackers can execute arbitrary code with system privileges by sending malicious XML-RPC requests

[Mitigation] Immediately upgrade to the patched versions (Password Manager Pro 12101, PAM360 5510, Access Manager Plus 4303 or higher)

[Affected Scope] Apache Spark versions 3.0.3 and earlier, 3.1.1 to 3.1.2, and 3.2.0 to 3.2.1

[Impact] Remote attackers can execute arbitrary OS shell commands with the privileges of the Spark process via crafted HTTP requests

[Mitigation] Immediately upgrade Apache Spark to versions 3.1.3, 3.2.2, 3.3.0 or later, or disable the spark.acls.enable configuration

[Affected Scope] dotCMS versions 3.0 through 22.02

[Impact] Unauthenticated attackers can upload malicious JSP files via directory traversal when anonymous content creation is enabled, leading to full Remote Code Execution (RCE)

[Mitigation] Immediately upgrade to patched dotCMS versions (22.03 or higher) and disable anonymous content creation APIs if not required

[Affected Scope] Wide range of Windows operating systems including Windows 10, 11, and Windows Server 2008 through 2022

[Impact] A local authenticated attacker can exploit the vulnerability to execute arbitrary code with SYSTEM privileges by abusing the CSRSS process

[Mitigation] Immediately apply the Microsoft official Cumulative Update (LCU) and monitor for unauthorized local account activities and anomalous child processes

[Affected Scope] Android and embedded devices powered by Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, and Voice & Music chipsets

[Impact] Local attackers can exploit a Use-After-Free condition via IOCTL munmap calls to execute arbitrary code with kernel privileges, leading to full system compromise

[Mitigation] Apply the official security patches released by Qualcomm and device OEMs (May 2022 or later) immediately

[Affected Scope] Atlassian Confluence Server and Data Center versions from 1.3.0 before 7.4.17, and specific release lines up to 7.18.1

[Impact] An unauthenticated remote attacker can execute arbitrary Java code on the Confluence instance with system privileges, leading to full host compromise.

[Mitigation] Immediately upgrade Confluence to the patched versions (7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, 7.18.1 or higher) or apply the vendor-provided workaround JAR files.

[Affected Scope] Windows Operating Systems and Microsoft Office applications utilizing the Microsoft Support Diagnostics Tool (MSDT) protocol

[Impact] Remote attackers can execute arbitrary code with the privileges of the calling application, potentially taking full control of the system

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the MSDT URL protocol handler via registry modification

[Affected Scope] Apple macOS Monterey prior to 12.3.1, macOS Big Sur prior to 11.6.6, iOS/iPadOS prior to 15.4.1, watchOS prior to 8.6, and tvOS prior to 15.5

[Impact] A local attacker can execute arbitrary code with kernel privileges via a malicious application, leading to complete system compromise. This vulnerability is actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (macOS 12.3.1, iOS 15.4.1, etc.) to all affected endpoints

[Affected Scope] macOS Monterey prior to 12.3.1, macOS Big Sur prior to 11.6.6, and macOS Catalina prior to Security Update 2022-004.

[Impact] A local attacker can exploit this vulnerability to read sensitive kernel memory, potentially leading to the disclosure of cryptographic keys, system credentials, or memory layouts.

[Mitigation] Immediately apply the official security updates provided by Apple (macOS Monterey 12.3.1, Big Sur 11.6.6, or Security Update 2022-004 Catalina).

[Affected Scope] Cisco IOS XR Software deployments with the Health Check RPM enabled

[Impact] Unauthenticated remote attackers can connect to the Redis instance inside the NOSi container, enabling them to write to the database, write arbitrary files to the container filesystem, and retrieve database information

[Mitigation] Apply official Cisco software updates, deactivate the unused Health Check RPM, or restrict access to TCP port 6379 using infrastructure ACLs

[Affected Scope] Contec SolarView Compact version 6.00 and prior.

[Impact] Unauthenticated attackers can execute arbitrary OS commands via the web interface, leading to complete system compromise.

[Mitigation] Apply the latest firmware updates immediately and restrict external internet access to the management interface.

[Affected Scope] Zyxel USG FLEX, ATP, and VPN series firewalls running vulnerable firmware versions (with ZTP enabled)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted HTTP POST requests, leading to complete device compromise

[Mitigation] Immediately upgrade to the patched firmware versions recommended by Zyxel and restrict external access to the management interface

[Affected Scope] Windows and Windows Server operating systems, specifically Active Directory Domain Controllers

[Impact] Unauthenticated remote attackers can call methods on the LSARPC interface to coerce the Domain Controller to authenticate to an arbitrary target via NTLM, leading to full domain takeover

[Mitigation] Apply the official Microsoft cumulative security updates immediately, and enforce Extended Protection for Authentication (EPA) along with SMB signing to block NTLM relay paths

[Affected Scope] All Windows Server Domain Controllers in environments where Active Directory Certificate Services (ADCS) is enabled.

[Impact] A low-privileged domain user can obtain a certificate for the Domain Controller's computer account, leading to full Domain Admin privilege escalation.

[Mitigation] Apply the official Microsoft cumulative security updates and harden the dNSHostName mapping validation on ADCS.

[Affected Scope] RARLAB UnRAR utility versions prior to 6.12 on Linux and UNIX platforms.

[Impact] Attackers can exploit this vulnerability to write arbitrary files outside the extraction directory, potentially leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade UnRAR to version 6.12 or later, and apply security patches to integrated applications like Zimbra.

[Affected Scope] F5 BIG-IP versions 16.1.x (prior to 16.1.2.2), 15.1.x (prior to 15.1.5.1), 14.1.x (prior to 14.1.4.6), 13.1.x (prior to 13.1.5), and all end-of-support 12.1.x and 11.6.x versions

[Impact] Unauthenticated remote attackers can bypass iControl REST authentication via crafted HTTP requests, enabling them to execute arbitrary system commands with root privileges on the target system

[Mitigation] Immediately upgrade to the patched versions, restrict access to the management interface, or apply temporary workarounds such as modifying self-IP port lockdown settings