Recently modified exploited zeroday vulnerabilities for "fedoraproject fedora" 39

Where

AND

Sort:

Microsoft Edge (Chromium-based)Out of bounds memory access in V8

Risk 82

Severity

8.8

Exploited

Zeroday

EPSS

0.18%

Use After Free

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-0519 Out of bounds memory access in V8

1 / 4

Source: Microsoft

First published (updated )

CVE-2024-0519

debian/libspreadsheet-parseexcel-perlArbitrary Code Execution (ACE) Vulnerability

Risk 76

Severity

7.8

Exploited

Zeroday

EPSS

2.12%

Code Injection

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.

1 / 3

Source: CISA

First published (updated )

CVE-2023-7101

debian/chromiumHeap buffer overflow in WebRTC

Risk 82

Severity

8.8

Exploited

Zeroday

EPSS

0.37%

Buffer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-7024 Heap buffer overflow in WebRTC

1 / 4

Source: Microsoft

First published (updated )

CVE-2023-7024

debian/chromiumInteger overflow in Skia

Risk 87

Severity

9.6

Exploited

Zeroday

EPSS

5.21%

Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2023-6345 Integer overflow in Skia

1 / 4

Source: Microsoft

First published (updated )

CVE-2023-6345

debian/roundcubeStored XSS vulnerability in Roundcube

Risk 65

Severity

6.1

Exploited

Zeroday

EPSS

90.74%

XSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Last updated 21 August 2024

1 / 5

Source: Ubuntu

First published (updated )

CVE-2023-5631

debian/libvpxHeap buffer overflow in vp8 encoding in libvpx

Risk 93

Severity

8.8

Exploited

Zeroday

EPSS

29.61%

Buffer Overflow, Path Traversal

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx

1 / 10

Source: Microsoft

First published (updated )

CVE-2023-5217

Microsoft VP9 Video ExtensionsHeap buffer overflow in WebP

Risk 95

Severity

8.8

Exploited

Zeroday

Buffer Overflow, Path Traversal

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-4863 Heap buffer overflow in WebP

1 / 8

Source: Microsoft

First published (updated )

CVE-2023-4863

debian/chromiumType Confusion in V8

Risk 92

Severity

8.8

Exploited

Zeroday

EPSS

34.86%

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-4762 Type Confusion in V8

1 / 4

Source: Microsoft

First published (updated )

CVE-2023-4762

redhat/open-vm-toolsVMware Tools Authentication Bypass Vulnerability

Risk 65

Severity

3.9

Exploited

Zeroday

Buffer Overflow, Path Traversal

AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

1 / 5

Source: Ubuntu

First published (updated )

CVE-2023-20867

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact