September 2023

9 results · Clear filters · Feed

• High 8.8
  CVE-2023-5217 Exploited Public exploit EPSS 49%

  Electron affected by libvpx's heap buffer overflow in vp8 encoding

  Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  Google Chrome libvpx chromium Browsers Debian Ubuntu Alpine npm
  Sep 28, 2023

  KEV Oct 2, 2023
• High 8.8
  CVE-2023-41993 Exploited Public exploit EPSS 24%

  The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Wolfi
  Sep 21, 2023

  KEV Sep 25, 2023
• High 7.8
  CVE-2023-41992 Exploited Public exploit EPSS 12%

  The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, mac…

  Apple macOS iOS and iPadOS macOS iOS
  Sep 21, 2023

  KEV Sep 25, 2023
• High 7.8
  CVE-2023-36802 Exploited Public exploit EPSS 28%

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 12, 2023

  KEV Sep 12, 2023
• High 8.8
  CVE-2023-4863 Exploited Public exploit EPSS 100%

  libwebp: OOB write in BuildHuffmanTable

  Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi npm PyPI Go crates.io NuGet
  Sep 12, 2023

  KEV Sep 13, 2023
• High 8.8
  CVE-2023-35674 Exploited Public exploit

  In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the co…

  Google Android Android
  Sep 11, 2023

  KEV Sep 13, 2023
• High 8.8
  CVE-2023-39780 Exploited Public exploit EPSS 40%

  On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_appl…

  ASUS RT-AX55
  Sep 11, 2023

  KEV Jun 2, 2025
• High 7.8
  CVE-2023-41064 Exploited Public exploit EPSS 53%

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.…

  Apple macOS iOS and iPadOS macOS iOS
  Sep 7, 2023

  KEV Sep 11, 2023
• High 8.8
  CVE-2023-4762 Exploited Public exploit EPSS 41%

  Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a…

  Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
  Sep 5, 2023

  KEV Feb 6, 2024