Jun 13, 2024
2 new incidents, 2 with updates.
Started
- ClosedPatched
Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)
Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution. Added to the CISA KEV catalog on 2024-07-17.
Adobe Commerce and Magento Open SourceClosed Jul 17, 2024
- ClosedPatched
Android Pixel Privilege Escalation
Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation. Added to the CISA KEV catalog on 2024-06-13.
Android PixelClosed Jun 13, 2024
Updated
- ClosedPatched
Progress Telerik Report Server Authentication Bypass by Spoofing
Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access. Added to the CISA KEV catalog on 2024-06-13.
Progress Telerik Report ServerClosed Jun 13, 2024
- ClosedPatched
Microsoft Windows Error Reporting Service Improper Privilege Management
Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges. Added to the CISA KEV catalog on 2024-06-13. CISA lists known use in ransomware campaigns.
Microsoft WindowsClosed Jun 13, 2024
