September 2023

14 results · Clear filters · Feed

• High 8.8
  CVE-2023-5217 Exploited Public exploit EPSS 49%

  Electron affected by libvpx's heap buffer overflow in vp8 encoding

  Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  Google Chrome libvpx chromium Browsers Debian Ubuntu Alpine npm
  Sep 28, 2023

  KEV Oct 2, 2023
• High 8.8
  CVE-2023-41993 Exploited Public exploit EPSS 24%

  The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Wolfi
  Sep 21, 2023

  KEV Sep 25, 2023
• High 7.8
  CVE-2023-41992 Exploited Public exploit EPSS 12%

  The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, mac…

  Apple macOS iOS and iPadOS macOS iOS
  Sep 21, 2023

  KEV Sep 25, 2023
• High 7.2
  CVE-2023-41179 Exploited

  A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free…

  Trend Micro Trend Micro Apex One Trend Micro Worry-Free Business Security Trend Micro Worry-Free Business Security Services
  Sep 19, 2023

  KEV Sep 21, 2023
• High 7.5
  CVE-2023-38205 Exploited Scanner template EPSS 100%

  ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

  Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the…

  Adobe ColdFusion
  Sep 14, 2023

  KEV Jul 20, 2023
• High 7.8
  CVE-2023-26369 Exploited Public exploit

  [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild

  Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…

  Adobe Acrobat Reader
  Sep 13, 2023

  KEV Sep 14, 2023
• High 7.8
  CVE-2023-36802 Exploited Public exploit EPSS 28%

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 12, 2023

  KEV Sep 12, 2023
• High 8.8
  CVE-2023-4863 Exploited Public exploit EPSS 100%

  libwebp: OOB write in BuildHuffmanTable

  Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi npm PyPI Go crates.io NuGet
  Sep 12, 2023

  KEV Sep 13, 2023
• High 7.8
  CVE-2023-41990 Exploited

  The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, m…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Sep 11, 2023

  KEV Jan 8, 2024
• High 8.8
  CVE-2023-35674 Exploited Public exploit

  In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the co…

  Google Android Android
  Sep 11, 2023

  KEV Sep 13, 2023
• High 8.8
  CVE-2023-39780 Exploited Public exploit EPSS 40%

  On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_appl…

  ASUS RT-AX55
  Sep 11, 2023

  KEV Jun 2, 2025
• High 7.8
  CVE-2023-41064 Exploited Public exploit EPSS 53%

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.…

  Apple macOS iOS and iPadOS macOS iOS
  Sep 7, 2023

  KEV Sep 11, 2023
• High 7.8
  CVE-2023-41061 Exploited

  A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.…

  Apple iOS and iPadOS watchOS iOS
  Sep 7, 2023

  KEV Sep 11, 2023
• High 8.8
  CVE-2023-4762 Exploited Public exploit EPSS 41%

  Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a…

  Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
  Sep 5, 2023

  KEV Feb 6, 2024