Feb 14, 2023
3 new incidents, 0 with updates.
Started
- ClosedHighPatched
Apple Multiple Products: WebKit Type Confusion (CVE-2023-23529)
Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Added to CISA KEV on 2023-02-14.
Apple Multiple ProductsClosed Feb 14, 2023
- ClosedHighPatched
Microsoft Office: Publisher Security Feature Bypass (CVE-2023-21715)
Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system. Added to CISA KEV on 2023-02-14.
Microsoft OfficeClosed Feb 14, 2023
- ClosedHighPatched
Microsoft Windows: 2 exploited vulnerabilities (CVE-2023-21823, CVE-2023-23376)
Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation. Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. Added to CISA KEV on 2023-02-14. CISA lists known use in ransomware campaigns.
Microsoft WindowsClosed Feb 14, 2023
