Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

KEV Release: 2022-06-27 #6

Open
hrbrmstr opened this issue Jul 4, 2022 · 0 comments
Open

KEV Release: 2022-06-27 #6

hrbrmstr opened this issue Jul 4, 2022 · 0 comments

Comments

@hrbrmstr
Copy link
Owner

hrbrmstr commented Jul 4, 2022

KEV Release: 2022-06-27

8 CVEs in this release.

  • CVE-2022-29499: Remote (Mitel:MiVoice Connect) Mitel MiVoice Connect Data Validation Vulnerability :: The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.

    Additional Information

    • CVSS 9.8
    • Severity: CRITICAL
    • Attack Vector: NETWORK
    • Attack Complexity: LOW
    • Privileges Required: NONE
    • User Interaction: NONE
    • Impact: 5.9
    • CWE: CWE-20
    • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    • EPSS: 0.011560000 / 0.592760000
    • In The Wild: https://inthewild.io/vuln/CVE-2022-29499

  • CVE-2021-30533: Local/Adjacent (Google:Chromium) Google Chromium Security Bypass Vulnerability :: Insufficient policy enforcement in the PopupBlocker for Chromium allows an attacker to remotely bypass security mechanisms. This vulnerability impacts web browsers using Chromium such as Chrome and Edge.

    Additional Information

    • CVSS 6.5
    • Severity: MEDIUM
    • Attack Vector: NETWORK
    • Attack Complexity: LOW
    • Privileges Required: NONE
    • User Interaction: REQUIRED
    • Impact: 3.6
    • CWE: CWE-863
    • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
    • EPSS: 0.012130000 / 0.649110000
    • In The Wild: https://inthewild.io/vuln/CVE-2021-30533

  • CVE-2021-4034: Local/Adjacent (Red Hat:Polkit) Red Hat Polkit Out-of-Bounds Read and Write Vulnerability :: The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability which allows for privilege escalation with administrative rights.

    Additional Information

    • CVSS 7.8
    • Severity: HIGH
    • Attack Vector: LOCAL
    • Attack Complexity: LOW
    • Privileges Required: LOW
    • User Interaction: NONE
    • Impact: 5.9
    • CWE: CWE-787
    • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • EPSS: 0.089540000 / 0.936360000
    • In The Wild: https://inthewild.io/vuln/CVE-2021-4034

  • CVE-2021-30983: Local/Adjacent (Apple:iOS and iPadOS) Apple iOS and iPadOS Buffer Overflow Vulnerability :: Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.

    Additional Information

    • CVSS 7.8
    • Severity: HIGH
    • Attack Vector: LOCAL
    • Attack Complexity: LOW
    • Privileges Required: NONE
    • User Interaction: REQUIRED
    • Impact: 5.9
    • CWE: CWE-120
    • Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    • EPSS: 0.010360000 / 0.403640000
    • In The Wild: https://inthewild.io/vuln/CVE-2021-30983

  • CVE-2020-3837: Local/Adjacent (Apple:Multiple Products) Apple Multiple Products Memory Corruption Vulnerability :: Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.

    Additional Information

    • CVSS 7.8
    • Severity: HIGH
    • Attack Vector: LOCAL
    • Attack Complexity: LOW
    • Privileges Required: NONE
    • User Interaction: REQUIRED
    • Impact: 5.9
    • CWE: CWE-787
    • Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    • EPSS: 0.027880000 / 0.818190000
    • In The Wild: https://inthewild.io/vuln/CVE-2020-3837

  • CVE-2020-9907: Local/Adjacent (Apple:Multiple Products) Apple Multiple Products Memory Corruption Vulnerability :: Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.

    Additional Information

    • CVSS 7.8
    • Severity: HIGH
    • Attack Vector: LOCAL
    • Attack Complexity: LOW
    • Privileges Required: NONE
    • User Interaction: REQUIRED
    • Impact: 5.9
    • CWE: CWE-787
    • Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    • EPSS: 0.010050000 / 0.355540000
    • In The Wild: https://inthewild.io/vuln/CVE-2020-9907

  • CVE-2019-8605: Local/Adjacent (Apple:Multiple Products) Apple Multiple Products Use-After-Free Vulnerability :: A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.

    Additional Information

    • CVSS 7.8
    • Severity: HIGH
    • Attack Vector: LOCAL
    • Attack Complexity: LOW
    • Privileges Required: NONE
    • User Interaction: REQUIRED
    • Impact: 5.9
    • CWE: CWE-416
    • Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    • EPSS: 0.026290000 / 0.808320000
    • In The Wild: https://inthewild.io/vuln/CVE-2019-8605

  • CVE-2018-4344: Local/Adjacent (Apple:Multiple Products) Apple Multiple Products Memory Corruption Vulnerability :: Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.

    Additional Information

    • CVSS 7.8
    • Severity: HIGH
    • Attack Vector: LOCAL
    • Attack Complexity: LOW
    • Privileges Required: NONE
    • User Interaction: REQUIRED
    • Impact: 5.9
    • CWE: CWE-119
    • Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    • EPSS: 0.010180000 / 0.379860000
    • In The Wild: https://inthewild.io/vuln/CVE-2018-4344
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@hrbrmstr