Vulnerabilidades exploradas (CISA KEV)

CVE-2022-40799 Alta · 8.8 KEV Alta · 56 CWE-494 29/11/2022

D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.

CVE-2022-4135 Crítica · 9.6 KEV Alta · 60 CWE-787 24/11/2022

Estouro de Buffer na Heap da GPU do Google Chromium

Estouro de buffer na heap em GPU no Google Chrome anterior à 107.0.5304.121 permitia que um atacante remoto que tivesse comprometido o processo renderer executasse potencialmente uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Alta)

CVE-2022-41223 Média · 6.8 KEV Alta · 62 Ransomware CWE-94 21/11/2022

Mitel MiVoice Connect Code Injection Vulnerability

The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.

CVE-2022-40765 Média · 6.8 KEV Alta · 62 Ransomware CWE-77 21/11/2022

Mitel MiVoice Connect Command Injection Vulnerability

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.

CVE-2022-23748 Alta · 7.8 KEV Alta · 55 CWE-426 17/11/2022

Dante Discovery Process Control Vulnerability

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.

CVE-2022-41128 Alta · 8.8 KEV Alta · 59 CWE-787 09/11/2022

Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

Windows Scripting Languages Remote Code Execution Vulnerability

CVE-2022-41125 Alta · 7.8 KEV Alta · 54 CWE-787 09/11/2022

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2022-41091 Média · 5.4 KEV Alta · 60 Ransomware CWE-863 09/11/2022

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2022-41073 Alta · 7.8 KEV Alta · 64 Ransomware CWE-787 09/11/2022

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-41080 Alta · 8.8 KEV Urgente · 72 Exploit público Ransomware 09/11/2022

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2022-41049 Média · 5.4 KEV Alta · 51 09/11/2022

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2022-31199 Crítica · 9.8 KEV Urgente · 76 Exploit público Ransomware CWE-502 07/11/2022

Netwrix Auditor Insecure Object Deserialization Vulnerability

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and potentially allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user on affected systems, including on systems Netwrix Auditor monitors.

CVE-2022-3723 Alta · 8.8 KEV Alta · 55 CWE-843 01/11/2022

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2022-42827 Alta · 7.8 KEV Alta · 51 CWE-787 01/11/2022

Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

CVE-2022-38181 Alta · 8.8 KEV Alta · 62 Exploit público CWE-416 25/10/2022

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.

CVE-2016-20017 Crítica · 9.8 KEV Urgente · 75 Exploit público CWE-77 19/10/2022

D-Link DSL-2750B Devices Command Injection Vulnerability

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022.

CVE-2022-21587 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-306 18/10/2022

Oracle E-Business Suite Unspecified Vulnerability

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2022-40684 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-287 18/10/2022

Fortinet Multiple Products Authentication Bypass Vulnerability

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

CVE-2022-41033 Alta · 7.8 KEV Alta · 53 CWE-843 11/10/2022

Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVE-2022-38028 Alta · 7.8 KEV Alta · 66 11/10/2022

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-41040 Alta · 8.8 KEV Urgente · 94 Exploit público Ransomware CWE-918 02/10/2022

Microsoft Exchange Server Server-Side Request Forgery Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2022-41082 Alta · 8.0 KEV Urgente · 94 Exploit público Ransomware CWE-502 02/10/2022

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2022-20775 Alta · 7.8 KEV Alta · 55 CWE-22 30/09/2022

Cisco SD-WAN Path Traversal Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF

CVE-2022-3075 Crítica · 9.6 KEV Alta · 59 CWE-20 26/09/2022

Google Chromium Mojo Insufficient Data Validation Vulnerability

Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2022-2856 Média · 6.5 KEV Alta · 52 CWE-20 26/09/2022

Google Chromium Intents Insufficient Input Validation Vulnerability

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.