Apr 13, 2023

Started

• ClosedCritical✓Patched

  Novi Survey: Insecure Deserialization (CVE-2023-29492)

  Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account. Added to CISA KEV on 2023-04-13.

  Novi Survey·Closed Apr 13, 2023·updated Apr 13, 2023

• ClosedHigh✓Patched

  Android Framework: Privilege Escalation (CVE-2023-20963)

  Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed. Added to CISA KEV on 2023-04-13.

  Android Framework·Closed Apr 13, 2023·updated Apr 13, 2023