Mar 5, 2024
3 new incidents, 0 with updates.
Started
- ClosedPatched
Sunhillo SureLine OS Command Injection
Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device for persistence on the network via shell metacharacters in ipAddr or dnsAddr in /cgi/networkDiag.cgi. Added to the CISA KEV catalog on 2024-03-05. CVE-2021-36380 was assigned before 2024; the KEV listing came in 2024.
Sunhillo SureLineClosed Mar 5, 2024
- ClosedPatched
Apple Multiple Products: 2 actively exploited vulnerabilities
CVE-2024-23225: Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections. CVE-2024-23296: Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections. Added to the CISA KEV catalog on 2024-03-06.
Apple Multiple ProductsClosed Mar 6, 2024
- ClosedPatched
Android Pixel Information Disclosure
Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information. Added to the CISA KEV catalog on 2024-03-05. CVE-2023-21237 was assigned before 2024; the KEV listing came in 2024.
Android PixelClosed Mar 5, 2024
