Vulnerabilidades exploradas (CISA KEV)

CVE-2023-36584 Média · 5.4 KEV Alta · 51 10/10/2023

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2023-36563 Média · 5.5 KEV Alta · 53 CWE-20 10/10/2023

Microsoft WordPad Information Disclosure Vulnerability

CVE-2023-44487 Alta · 7.5 KEV Urgente · 73 Exploit público CWE-400 10/10/2023

HTTP/2 Rapid Reset: negação de serviço no protocolo

O protocolo HTTP/2 permite uma negação de serviço (consumo de recursos do servidor) porque o cancelamento de requisições pode reiniciar muitos streams rapidamente, conforme explorado na natureza entre agosto e outubro de 2023.

CVE-2023-5217 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 28/09/2023

Estouro de buffer no heap na codificação VP8 do libvpx no Google Chromium

Estouro de buffer no heap na codificação vp8 no libvpx do Google Chrome anterior à 117.0.5938.132 e libvpx 1.13.1 permitia que um atacante remoto potencialmente explorasse corrupção de heap por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)

CVE-2023-36802 Alta · 7.8 KEV Alta · 62 Exploit público CWE-416 12/09/2023

Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

CVE-2023-36761 Média · 6.5 KEV Alta · 53 CWE-20 12/09/2023

Microsoft Word Information Disclosure Vulnerability

CVE-2023-4863 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 12/09/2023

Estouro de buffer baseado em heap no libwebp do Google Chromium

Estouro de buffer baseado em heap na libwebp no Google Chrome anterior a 116.0.5845.187 e libwebp 1.3.2 permitiu que um atacante remoto realizasse uma escrita fora dos limites de memória por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Crítica)

CVE-2023-4762 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 05/09/2023

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2023-38180 Alta · 7.5 KEV Alta · 58 CWE-400 08/08/2023

Negação de Serviço no Microsoft .NET e Visual Studio

Vulnerabilidade de negação de serviço no .NET e no Visual Studio

CVE-2023-36884 Alta · 7.5 KEV Urgente · 72 Exploit público Ransomware CWE-362 11/07/2023

Microsoft Windows Search Remote Code Execution Vulnerability

Windows Search Remote Code Execution Vulnerability

CVE-2023-36874 Alta · 7.8 KEV Urgente · 74 Exploit público CWE-59 11/07/2023

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2023-35311 Alta · 8.8 KEV Alta · 56 CWE-367 11/07/2023

Microsoft Outlook Security Feature Bypass Vulnerability

CVE-2023-32049 Alta · 8.8 KEV Alta · 55 11/07/2023

Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-32046 Alta · 7.8 KEV Alta · 55 11/07/2023

Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

Windows MSHTML Platform Elevation of Privilege Vulnerability

CVE-2023-29360 Alta · 8.4 KEV Alta · 62 Exploit público CWE-822 13/06/2023

Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

CVE-2023-29357 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-303 13/06/2023

Microsoft SharePoint Server Privilege Escalation Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVE-2023-29336 Alta · 7.8 KEV Urgente · 70 Exploit público CWE-416 09/05/2023

Microsoft Win32K Privilege Escalation Vulnerability

Win32k Elevation of Privilege Vulnerability

CVE-2023-24955 Alta · 7.2 KEV Urgente · 84 Exploit público Ransomware CWE-94 09/05/2023

Microsoft SharePoint Server Code Injection Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2023-28252 Alta · 7.8 KEV Urgente · 84 Exploit público Ransomware CWE-787 11/04/2023

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-28229 Alta · 7.0 KEV Alta · 59 Exploit público CWE-591 11/04/2023

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2023-24880 Média · 4.4 KEV Alta · 63 Ransomware CWE-863 14/03/2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-23397 Crítica · 9.8 KEV Alta · 66 Exploit público CWE-294 14/03/2023

Microsoft Office Outlook Privilege Escalation Vulnerability

Microsoft Outlook Elevation of Privilege Vulnerability

CVE-2023-21823 Alta · 7.8 KEV Alta · 61 Exploit público CWE-190 14/02/2023

Microsoft Windows Graphic Component Privilege Escalation Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2023-23376 Alta · 7.8 KEV Alta · 65 Ransomware CWE-787 14/02/2023

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-21715 Alta · 7.3 KEV Alta · 55 CWE-863 14/02/2023

Microsoft Office Publisher Security Feature Bypass Vulnerability

Microsoft Publisher Security Feature Bypass Vulnerability