Exploited vulnerabilities (CISA KEV)

CVE-2023-42916 Medium · 6.5 KEV High · 53 CWE-125 Nov 30, 2023

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

CVE-2023-42917 High · 8.8 KEV High · 55 CWE-787 Nov 30, 2023

Apple Multiple Products WebKit Memory Corruption Vulnerability

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

CVE-2023-6345 Critical · 9.6 KEV High · 63 CWE-190 Nov 29, 2023

Google Skia Integer Overflow Vulnerability

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

CVE-2023-49103 High · 7.5 KEV Urgent · 79 Public exploit CWE-200 Nov 21, 2023

ownCloud graphapi Information Disclosure Vulnerability

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure.

CVE-2023-49105 Critical · 9.8 KEV High · 69 Public exploit CWE-287 Nov 21, 2023

ownCloud Improper Authentication Vulnerability

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no signing-key is configured for the owner of the files. The earliest affected version is 10.6.0.

CVE-2023-48365 Critical · 9.9 KEV Urgent · 70 Ransomware CWE-444 Nov 15, 2023

Qlik Sense HTTP Tunneling Vulnerability

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265.

CVE-2023-36424 High · 7.8 KEV High · 61 Public exploit CWE-125 Nov 14, 2023

Microsoft Windows Out-of-Bounds Read Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-36036 High · 7.8 KEV High · 56 CWE-787 Nov 14, 2023

Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-36033 High · 7.8 KEV High · 55 CWE-119 Nov 14, 2023

Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2023-36025 High · 8.8 KEV High · 62 Public exploit Nov 14, 2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-47246 Critical · 9.8 KEV Urgent · 83 Public exploit Ransomware CWE-22 Nov 10, 2023

SysAid Server Path Traversal Vulnerability

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.