October 2023

5 results · Clear filters · Feed

• Medium 6.1
  CVE-2023-5631 Exploited EPSS 76%

  Stored XSS vulnerability in Roundcube

  Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary Java…

  Roundcube Roundcubemail roundcube roundcube Debian Ubuntu
  Oct 18, 2023

  KEV Oct 26, 2023
• Medium 6.5
  CVE-2023-36563 Exploited EPSS 20%

  Microsoft WordPad Information Disclosure Vulnerability

  Microsoft WordPad Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 10, 2023

  KEV Oct 10, 2023
• Medium 5.4
  CVE-2023-36584 Exploited

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 10, 2023

  KEV Nov 16, 2023
• Medium 5.3
  CVE-2023-41763 Exploited Scanner template EPSS 90%

  Skype for Business Elevation of Privilege Vulnerability

  Skype for Business Elevation of Privilege Vulnerability

  Microsoft Skype for Business Server 2015 CU13 Skype for Business Server 2019 CU7
  Oct 10, 2023

  KEV Oct 10, 2023
• Medium 5.5
  CVE-2023-4211 Exploited

  Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

  A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

  Arm Valhall GPU Kernel Driver Arm 5th Gen GPU Architecture Kernel Driver Bifrost GPU Kernel Driver
  Oct 1, 2023

  KEV Oct 3, 2023