A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous session. This allows them to transmit HTTP requests to unauthorized endpoints. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunneling HTTP requests in the raw HTTP request. This allows them to send requests that get executed by the backend server hosting the repository application. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.
CVE-2023-33107 is a high-severity integer overflow vulnerability in Qualcomm Snapdragon platforms affecting a wide range of mobile, IoT, automotive, and wearable devices. The flaw occurs in the Graphics Linux driver during IOCTL calls when assigning shared virtual memory regions, leading to memory corruption. Exploitation requires local access and no user interaction or privileges, potentially allowing attackers to execute arbitrary code or cause denial of service. Although no known exploits are reported, the broad product impact and high CVSS score indicate significant risk. European organizations using devices with affected Snapdragon chipsets, especially in telecommunications, automotive, and IoT sectors, face confidentiality, integrity, and availability threats. Mitigation involves applying vendor patches once available, restricting local access, and monitoring for anomalous behavior. Countries with high smartphone penetration and automotive industries, such as Germany, France, and the UK, are most likely impacted. The vulnerability's ease of exploitation without privileges and its broad scope warrant a high severity rating. Defenders should prioritize patch management and device security controls to mitigate potential exploitation.
CVE-2023-33106 is a high-severity memory corruption vulnerability in Qualcomm Snapdragon platforms caused by an out-of-range pointer offset when submitting a large list of sync points via the IOCTL_KGSL_GPU_AUX_COMMAND interface. This flaw affects a wide range of Snapdragon chipsets used in mobile, wearable, automotive, and IoT devices. Exploitation could lead to full compromise of confidentiality, integrity, and availability without requiring user interaction or privileges. Although no known exploits are currently reported in the wild, the vulnerability's nature and broad impact make it a significant risk. European organizations relying on devices with affected Snapdragon chipsets, especially in critical infrastructure, automotive, and mobile sectors, could face severe operational and data security impacts. Mitigation requires prompt firmware and driver updates from device manufacturers and careful validation of GPU command inputs. Countries with high adoption of Snapdragon-based devices and strong automotive and mobile technology sectors, such as Germany, France, and the UK, are most likely to be impacted.
CVE-2023-33063 is a high-severity use-after-free vulnerability (CWE-416) affecting numerous Qualcomm Snapdragon platforms and related products. It involves memory corruption in DSP Services triggered during remote calls from the High-Level Operating System (HLOS) to the Digital Signal Processor (DSP). The vulnerability requires low privileges and no user interaction but local access, enabling potential attackers to execute arbitrary code or cause denial of service. This flaw impacts confidentiality, integrity, and availability of affected devices. While no known exploits are currently reported in the wild, the broad range of affected Snapdragon platforms, including mobile, IoT, automotive, and wearable devices, poses a significant risk. European organizations relying on Qualcomm Snapdragon-based infrastructure or devices should prioritize patching once updates are available. Mitigation involves applying vendor patches, restricting local access, and monitoring for anomalous DSP service behavior. Countries with high mobile and IoT adoption, such as Germany, France, UK, and the Nordics, are most likely to be affected due to market penetration and strategic technology use. The vulnerability’s CVSS score is 7.8, reflecting its high severity given the potential for remote code execution and system compromise without user interaction.
Multiple Qualcomm chipsets have a use-after-free vulnerability triggered during process initialization when shell memory is freed via an IOCTL munmap call. This vulnerability has been exploited in the wild and is rated as high severity.
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure.
Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
CVE-2023-4911 is a buffer overflow vulnerability in the GNU C Library's dynamic loader ld.so, triggered by processing the GLIBC_TUNABLES environment variable. This flaw allows a local attacker to execute code with elevated privileges. The vulnerability has a high severity with a CVSS score of 7.8 and is known to be exploited in the wild. No explicit affected versions or patch information are provided in the input data.
CVE-2020-2551 is an unspecified vulnerability in Oracle Fusion Middleware's WebLogic Server core components. It allows an unauthenticated attacker with network access via the IIOP protocol to compromise the WebLogic Server. The vulnerability has been exploited in the wild. Oracle released patches for this and other vulnerabilities in their January 2020 Critical Patch Update and strongly recommends applying these patches promptly.
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
CVE-2023-36033 is a high-severity privilege escalation vulnerability in the Microsoft Windows Desktop Window Manager (DWM) Core Library. It allows an attacker with limited privileges to escalate their privileges on the affected system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2023-36025 is a high-severity vulnerability in Microsoft Windows SmartScreen that allows attackers to bypass Windows Defender SmartScreen security checks and prompts. This bypass could enable execution of malicious content without the usual warnings. The vulnerability has been exploited in the wild, increasing its risk. No specific affected Windows versions or patch information is provided in the available data.
CVE-2023-36036 is a privilege escalation vulnerability in the Microsoft Windows Cloud Files Mini Filter Driver. This flaw allows an attacker with limited privileges to escalate to SYSTEM privileges. The vulnerability has a high severity score of 7.8 and has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
