Aug 5, 2024

Started

• ClosedHigh✓Patched

  Apache OFBiz Incorrect Authorization

  Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker. Added to the CISA KEV catalog on 2024-08-27.

  Apache OFBiz·Closed Aug 27, 2024·updated Aug 27, 2024

• ClosedHigh✓Patched

  Microsoft COM for Windows Deserialization of Untrusted Data

  Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script. Added to the CISA KEV catalog on 2024-08-05. CVE-2018-0824 was assigned before 2024; the KEV listing came in 2024.

  Microsoft Windows·Closed Aug 5, 2024·updated Aug 5, 2024