Vulnerabilidades exploradas (CISA KEV)

CVE-2022-0609 Alta · 8.8 KEV Alta · 66 CWE-416 04/04/2022

Vulnerabilidade de Use-After-Free no componente Animation do Google Chromium (CVE-2022-0609)

Use after free em Animation no Google Chrome anterior à 98.0.4758.102 permitiu que um invasor remoto potencialmente explorasse corrupção de heap por meio de uma página HTML criada com esse fim.

CVE-2022-22965 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-94 01/04/2022

Execução remota de código por data binding no Spring Framework (CVE-2022-22965)

Uma aplicação Spring MVC ou Spring WebFlux executando em JDK 9+ pode estar vulnerável a execução remota de código (RCE) por meio de data binding. A exploração específica exige que a aplicação seja executada no Tomcat como implantação WAR. Se a aplicação for implantada como um jar executável do Spring Boot, que é o padrão, ela não é vulnerável a essa exploração específica. Contudo, a natureza da vulnerabilidade é mais geral, e pode haver outras formas de explorá-la.

CVE-2022-22963 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-917 01/04/2022

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

CVE-2022-26871 Crítica · 9.8 KEV Alta · 63 CWE-345 29/03/2022

Trend Micro Apex Central Arbitrary File Upload Vulnerability

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

CVE-2022-22948 Média · 6.5 KEV Alta · 68 Exploit público CWE-276 29/03/2022

VMware vCenter Server Incorrect Default File Permissions Vulnerability

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

CVE-2022-26258 Crítica · 9.8 KEV Alta · 63 CWE-78 27/03/2022

D-Link DIR-820L Remote Code Execution Vulnerability

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

CVE-2022-0995 Alta · 7.8 KEV Urgente · 73 Exploit público CWE-787 25/03/2022

Linux Kernel Out-of-Bounds Write Vulnerability

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

CVE-2022-1040 Crítica · 9.8 KEV Urgente · 81 Exploit público 25/03/2022

Sophos Firewall Authentication Bypass Vulnerability

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.

CVE-2022-22620 Alta · 8.8 KEV Alta · 62 Exploit público CWE-416 18/03/2022

Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVE-2022-22587 Crítica · 9.8 KEV Alta · 62 CWE-787 18/03/2022

Apple Memory Corruption Vulnerability

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

CVE-2022-26501 Crítica · 9.8 KEV Urgente · 72 Ransomware CWE-306 17/03/2022

Veeam Backup & Replication Remote Code Execution Vulnerability

Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).

CVE-2022-26500 Alta · 8.8 KEV Alta · 65 Ransomware CWE-22 17/03/2022

Veeam Backup & Replication Remote Code Execution Vulnerability

Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.

CVE-2021-39793 Alta · 7.8 KEV Alta · 49 CWE-787 16/03/2022

Google Pixel Out-of-Bounds Write Vulnerability

In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N/A

CVE-2022-26143 Crítica · 9.8 KEV Alta · 67 Exploit público CWE-306 10/03/2022

MiCollab, MiVoice Business Express Access Control Vulnerability

The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic). This was exploited in the wild in February and March 2022 for the TP240PhoneHome DDoS attack.

CVE-2022-0847 Alta · 7.8 KEV Urgente · 86 Exploit público CWE-665 10/03/2022

Linux Kernel Privilege Escalation Vulnerability

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

CVE-2022-26318 Crítica · 9.8 KEV Urgente · 81 Exploit público 04/03/2022

WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

CVE-2022-22947 Crítica · 10.0 KEV Urgente · 83 Exploit público CWE-917 03/03/2022

Vulnerabilidade de Injeção de Código no VMware Spring Cloud Gateway (CVE-2022-22947)

Nas versões do spring cloud gateway anteriores a 3.1.1+ e 3.0.7+, as aplicações são vulneráveis a um ataque de injeção de código quando o endpoint Gateway Actuator está habilitado, exposto e sem proteção. Um atacante remoto poderia enviar uma requisição maliciosamente elaborada que permitiria a execução remota arbitrária no host remoto.

CVE-2022-0492 Alta · 7.8 KEV Urgente · 73 Exploit público CWE-862 03/03/2022

Linux Kernel Improper Authentication Vulnerability

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

CVE-2022-22706 Alta · 7.8 KEV Alta · 57 Exploit público CWE-119 03/03/2022

Arm Mali GPU Kernel Driver Unspecified Vulnerability

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

CVE-2022-23176 Alta · 8.8 KEV Alta · 55 24/02/2022

WatchGuard Firebox and XTM Privilege Escalation Vulnerability

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3.

CVE-2022-0543 Crítica · 10.0 KEV Urgente · 83 Exploit público CWE-862 18/02/2022

Debian-specific Redis Server Lua Sandbox Escape Vulnerability

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

CVE-2021-45382 Crítica · 9.8 KEV Alta · 67 Exploit público CWE-78 17/02/2022

D-Link Multiple Routers Remote Code Execution Vulnerability

A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.

CVE-2021-3560 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-754 16/02/2022

Red Hat Polkit Incorrect Authorization Vulnerability

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVE-2022-24086 Crítica · 9.8 KEV Urgente · 73 Exploit público CWE-20 16/02/2022

Adobe Commerce e Magento Open Source: validação inadequada de entrada no checkout

Adobe Commerce, versões 2.4.3-p1 (e anteriores) e 2.3.7-p2 (e anteriores), são afetados por uma vulnerabilidade de validação inadequada de entrada durante o processo de checkout. A exploração desta falha não requer interação do usuário e pode resultar em execução arbitrária de código.

CVE-2021-4102 Alta · 8.8 KEV Alta · 55 CWE-416 11/02/2022

Google Chromium V8 Use-After-Free Vulnerability

Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.