Month: November 2023

Intel Graphics Drivers privilege escalation | CVE-2023-27305

November 16, 2023

NAME__________Intel Graphics Drivers privilege escalationPlatforms Affected:Intel Arc & Iris Xe Graphics - WHQL - Windows DriversRisk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Intel Graphics...

GIMP buffer overflow | CVE-2023-44442

November 16, 2023

NAME__________GIMP buffer overflowPlatforms Affected:GIMP GIMPRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________GIMP is vulnerable to a heap-based buffer overflow, caused by improper bounds checking...

HPE Aruba Networking ArubaOS and InstantOS code execution | CVE-2023-45626

November 16, 2023

NAME__________HPE Aruba Networking ArubaOS and InstantOS code executionPlatforms Affected:Aruba Networks ArubaOS 10.5.0.0 Aruba Networks ArubaOS 10.4.0.2 Aruba Networks InstantOS 8.11.1.2...

Adobe Bridge information disclosure | CVE-2023-44329

November 16, 2023

NAME__________Adobe Bridge information disclosurePlatforms Affected:Adobe Bridge 13.0.4 Adobe Bridge 14.0.0Risk Level:3.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Bridge could allow a remote attacker to...

Adobe RoboHelp SQL injection | CVE-2023-22275

November 16, 2023

NAME__________Adobe RoboHelp SQL injectionPlatforms Affected:Adobe RoboHelp Server RHS 11.4Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe RoboHelp is vulnerable to SQL injection, caused by...

Microsoft .NET, .NET Framework and Visual Studio privilege escalation | CVE-2023-36049

November 16, 2023

NAME__________Microsoft .NET, .NET Framework and Visual Studio privilege escalationPlatforms Affected:Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.8 Microsoft .NET Framework...

Intel Optane SSD products denial of service | CVE-2023-24587

November 16, 2023

NAME__________Intel Optane SSD products denial of servicePlatforms Affected:Intel Optane Intel Optane SSD DC P4800X Intel Optane SSD DC P4801X Series...

Adobe Photoshop information disclosure | CVE-2023-44332

November 16, 2023

NAME__________Adobe Photoshop information disclosurePlatforms Affected:Adobe Photoshop 2023 24.71 Adobe Photoshop 2024 25.0Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Photoshop could allow a remote...

Fortinet FortiMail security bypass | CVE-2023-36633

November 16, 2023

NAME__________Fortinet FortiMail security bypassPlatforms Affected:Fortinet FortiMail 7.2.2 Fortinet FortiMail 7.2.1Risk Level:5.4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Fortinet FortiMail could allow a remote authenticated attacker...

Multiple AMD processors privilege escalation | CVE-2021-46774

November 16, 2023

NAME__________Multiple AMD processors privilege escalationPlatforms Affected:AMD Ryzen 3000 series Desktop processors AMD Ryzen Threadripper PRO ProcessorsRisk Level:4.2Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Multiple AMD...

Intel OFU Software privilege escalation | CVE-2023-29161

November 16, 2023

NAME__________Intel OFU Software privilege escalationPlatforms Affected:Intel OFU 14.1.30 Intel OFU 14.1.29Risk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Intel OFU Software could allow a local...

Fortinet FortiWLM directory traversal | CVE-2023-42783

November 16, 2023

NAME__________Fortinet FortiWLM directory traversalPlatforms Affected:Fortinet FortiWLM 8.6.2 Fortinet FortiWLM 8.5.2 Fortinet FortiWLM 8.4.2 Fortinet FortiWLM 8.3.3Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Fortinet FortiWLM...

Fortinet FortiOS and Fortinet FortiProxy security bypass | CVE-2023-28002

November 16, 2023

NAME__________Fortinet FortiOS and Fortinet FortiProxy security bypassPlatforms Affected:Fortinet FortiOS 6.0.0 Fortinet FortiOS 6.2.0 Fortinet FortiOS 6.4.0 Fortinet FortiProxy 2.0.0 Fortinet...

Adobe InCopy code execution | CVE-2023-26368

November 16, 2023

NAME__________Adobe InCopy code executionPlatforms Affected:Adobe InCopy 18.5 Adobe InCopy 17.4.2Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe InCopy could allow a remote attacker to...

Intel Smart Campus Android App denial of service | CVE-2023-38411

November 16, 2023

NAME__________Intel Smart Campus Android App denial of servicePlatforms Affected:Intel Smart Campus android applicationRisk Level:3.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Intel Smart Campus Android...

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family information disclosure | CVE-2023-44318

November 16, 2023

NAME__________Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family information disclosurePlatforms Affected:Siemens SCALANCE XF-200BA Siemens SCALANCE XR-300WG...

Intel oneAPI HPC Toolkit and MPI Library software privilege escalation | CVE-2023-27383

November 16, 2023

NAME__________Intel oneAPI HPC Toolkit and MPI Library software privilege escalationPlatforms Affected:Intel MPI Library Intel oneAPI Toolkits and Component software 2023Risk...

TP-Link TL-WR841N code execution | CVE-2023-39471

November 16, 2023

NAME__________TP-Link TL-WR841N code executionPlatforms Affected:TP-Link TL-WR841NRisk Level:7.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________TP-Link TL-WR841N could allow a remote attacker to execute arbitrary code on...

Adobe Bridge information disclosure | CVE-2023-44328

November 16, 2023

Intel NUC Software privilege escalation | CVE-2023-32278

November 16, 2023

NAME__________Intel NUC Software privilege escalationPlatforms Affected:Intel NUC Uniwill Service Driver for Intel(R) NUC M15 Laptop Kits - LAPRC510 & LAPRC710...

Intel QuickAssist Technology (QAT) software privilege escalation | CVE-2023-32641

November 16, 2023

NAME__________Intel QuickAssist Technology (QAT) software privilege escalationPlatforms Affected:Intel QuickAssist Technology (QAT) software QAT20.L.1.0.40-00004Risk Level:7.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Intel QuickAssist Technology (QAT) software...

Month: November 2023

Intel Graphics Drivers privilege escalation | CVE-2023-27305

GIMP buffer overflow | CVE-2023-44442

HPE Aruba Networking ArubaOS and InstantOS code execution | CVE-2023-45626

Adobe Bridge information disclosure | CVE-2023-44329

Adobe RoboHelp SQL injection | CVE-2023-22275

Microsoft .NET, .NET Framework and Visual Studio privilege escalation | CVE-2023-36049

Intel Optane SSD products denial of service | CVE-2023-24587

Adobe Photoshop information disclosure | CVE-2023-44332

Fortinet FortiMail security bypass | CVE-2023-36633

Multiple AMD processors privilege escalation | CVE-2021-46774

Intel OFU Software privilege escalation | CVE-2023-29161

Fortinet FortiWLM directory traversal | CVE-2023-42783

Fortinet FortiOS and Fortinet FortiProxy security bypass | CVE-2023-28002

Adobe InCopy code execution | CVE-2023-26368

Intel Smart Campus Android App denial of service | CVE-2023-38411

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family information disclosure | CVE-2023-44318

Intel oneAPI HPC Toolkit and MPI Library software privilege escalation | CVE-2023-27383

TP-Link TL-WR841N code execution | CVE-2023-39471

Adobe Bridge information disclosure | CVE-2023-44328

Intel NUC Software privilege escalation | CVE-2023-32278

Intel QuickAssist Technology (QAT) software privilege escalation | CVE-2023-32641

Intel Graphics Drivers denial of service | CVE-2023-25071

Intel QAT drivers for Windows HW Version 2.0 privilege escalation | CVE-2023-28378

Zoom Rooms Client for Windows and Zoom VDI Client denial of service | CVE-2023-39202

US-CERT Vulnerability Summary for the Week of November 11, 2024

[DRAGONFORCE] – Ransomware Victim: SUSTA S[.]r[.]l[.]

[MEDUSA] – Ransomware Victim: Maxeon

[BLACKSUIT] – Ransomware Victim: eastgateauto[.]com

[ELDORADO] – Ransomware Victim: LA LUCKY Brand

You may have missed