A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
CVE-2023-33246 is a critical remote code execution vulnerability in Apache RocketMQ versions 5.1.0 and below. The vulnerability arises because several RocketMQ components exposed on the extranet lack proper permission verification, allowing attackers to exploit the update configuration function or forge protocol content to execute arbitrary commands with the privileges of the RocketMQ process. This flaw affects NameServer, Broker, and Controller components. No authentication or user interaction is required, and the vulnerability has a CVSS score of 9.8, indicating a severe risk to confidentiality, integrity, and availability. Users are strongly advised to upgrade to RocketMQ 5.1.1 or above, or 4.
CVE-2023-38831 is a high-severity remote code execution vulnerability affecting WinRAR versions prior to 6.23. The flaw allows an attacker to execute malicious code when a user opens a specially crafted ZIP archive containing a benign file and a folder with the same name. Exploitation requires user interaction but no privileges or authentication. This vulnerability was actively exploited in the wild from April to October 2023. The CVSS score of 7.8 reflects significant impact on confidentiality, integrity, and availability. European organizations using vulnerable WinRAR versions, especially those processing ZIP files from untrusted sources, are at risk. Mitigation involves updating WinRAR to version 6.23 or later and implementing strict archive handling policies.
CVE-2023-32315 is a high-severity path traversal vulnerability in the Openfire XMPP server's administrative console setup environment. It allows unauthenticated attackers to access restricted administrative pages by exploiting improper pathname restrictions. This affects all Openfire versions released since April 2015 up to versions before 4.6.8 and 4.7.5, with patches available in those versions. The vulnerability enables attackers to gain partial administrative access without credentials, potentially compromising confidentiality and availability. No known exploits are currently in the wild, but the ease of exploitation and broad version impact make timely patching critical. European organizations using Openfire should prioritize upgrading to patched versions or apply mitigations from the GitHub advisory.
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.
CVE-2023-27532 is a high severity vulnerability in Veeam Backup & Replication versions prior to 12.0.0.1420. It involves missing authentication for a critical function, allowing attackers to obtain encrypted credentials stored in the configuration database. This exposure can lead to unauthorized access to backup infrastructure hosts. The vulnerability has a CVSS score of 7.5 and is known to be exploited in the wild, including use in ransomware campaigns.
Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.
Zyxel P660HN-T1A routers have a command injection vulnerability in the Remote System Log forwarding feature. This flaw is exploitable by unauthenticated users via the remote_host parameter on the ViewLog.asp page. The vulnerability has been exploited in the wild and is considered high severity.
This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.
CVE-2023-35078 is a critical authentication bypass vulnerability in Ivanti Endpoint Manager Mobile (EPMM) that allows attackers to access restricted application functionality and resources without any authentication. The vulnerability has a CVSS score of 10, indicating maximum severity, with complete compromise of confidentiality, integrity, and availability possible. No user interaction or privileges are required to exploit this flaw, and it affects all versions of the product. While no public exploits are currently known, the vulnerability poses a significant risk to organizations using Ivanti EPMM for mobile device management. European organizations relying on this product for endpoint security could face unauthorized access, data breaches, and operational disruption. Immediate patching or mitigation is critical, though no patches are currently listed. Organizations should implement network-level restrictions, monitor for anomalous access, and consider compensating controls until a fix is available. Countries with high adoption of Ivanti EPMM and critical infrastructure reliance on mobile device management, such as Germany, the UK, France, and the Netherlands, are most at risk.
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
