Vulnerabilidades exploradas (CISA KEV)

CVE-2022-38181 Alta · 8.8 KEV Alta · 62 Exploit público CWE-416 25/10/2022

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.

CVE-2016-20017 Crítica · 9.8 KEV Urgente · 75 Exploit público CWE-77 19/10/2022

D-Link DSL-2750B Devices Command Injection Vulnerability

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022.

CVE-2022-21587 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-306 18/10/2022

Oracle E-Business Suite Unspecified Vulnerability

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2022-40684 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-287 18/10/2022

Fortinet Multiple Products Authentication Bypass Vulnerability

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

CVE-2022-41033 Alta · 7.8 KEV Alta · 53 CWE-843 11/10/2022

Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVE-2022-38028 Alta · 7.8 KEV Alta · 66 11/10/2022

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-41040 Alta · 8.8 KEV Urgente · 94 Exploit público Ransomware CWE-918 02/10/2022

Microsoft Exchange Server Server-Side Request Forgery Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2022-41082 Alta · 8.0 KEV Urgente · 94 Exploit público Ransomware CWE-502 02/10/2022

Microsoft Exchange Server Remote Code Execution Vulnerability