Week 28, 2023

10–16 July 2023

New CVEs: 849
Critical: 47
High: 220
Newly exploited: 7
Advisories: 292
Malicious pkgs: 78

Newly exploited 7

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2022-29303 KEV Jul 13, 2023 SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
EPSS 98%
High 8.8
CVE-2023-37450 KEV Jul 13, 2023 The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Proce…
Apple · macOS · iOS and iPadOS · watchOS

EPSS 19%
Critical 9.8
CVE-2022-31199 KEV Jul 11, 2023 · ransomware Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents…
EPSS 36%
High 8.8
CVE-2023-32049 KEV Jul 11, 2023 Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 4.2%
High 8.8
CVE-2023-35311 KEV Jul 11, 2023 Microsoft Outlook Security Feature Bypass Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office 2019

EPSS 16%
High 7.8
CVE-2023-36874 KEV Jul 11, 2023 Windows Error Reporting Service Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 44%
High 7.8
CVE-2023-32046 KEV Jul 11, 2023 Windows MSHTML Platform Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 10%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
Adobe · ColdFusion

EPSS 100%
Critical 9.8
CVE-2023-24489 A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to …
Citrix · Citrix ShareFile Storage Zones Controller

EPSS 97%
Critical 10.0
CVE-2023-37462 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-skin-ui
xwiki · xwiki-platform

EPSS 92%
Critical 9.8
CVE-2023-37582 Apache RocketMQ: Possible remote code execution when using the update configuration function
Apache Software Foundation · Apache RocketMQ

EPSS 90%
Critical 9.8
CVE-2023-34124 The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2…
SonicWall · GMS · Analytics

EPSS 50%
Critical 9.8
CVE-2023-3595 Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution
Rockwell Automation · Rockwell Auotmation · 1756-EN2F Series C · 1756-EN2TR Series A, B

EPSS 5.5%
Critical 9.8
CVE-2023-37466 vm2 Sandbox Escape vulnerability
patriksimek · vm2

EPSS 3.9%
Critical 9.8
CVE-2023-32254 Tree connection race condition remote code execution vulnerability
Red Hat · Fedora · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8

EPSS 2.9%
Critical 9.0
CVE-2023-32250 Session race condition remote code execution vulnerability
Red Hat · Fedora · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8

EPSS 2.6%
Critical 9.8
CVE-2023-32057 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 2.2%
Critical 9.6
CVE-2023-33150 Microsoft Office Security Feature Bypass Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office 2019

EPSS 2.1%
Critical 9.8
CVE-2023-35365 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 1.8%
Critical 9.9
CVE-2023-3342 User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
WPEverest · User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

EPSS 1.7%
Critical 9.8
CVE-2023-35367 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 1.7%
Critical 9.8
CVE-2023-35366 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 1.7%

All 47 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

High 7.5
CVE-2023-29298 Adobe ColdFusion Improper Access Control Security feature bypass
Adobe · ColdFusion

EPSS 100%
High 7.5
CVE-2023-36884 Windows Search Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 99%
High 8.8
CVE-2023-34127 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authe…
SonicWall · GMS · Analytics

EPSS 86%
Medium 6.1
CVE-2023-24488 Cross site scripting
Citrix · Citrix ADC and Citrix Gateway 

EPSS 81%
High 7.4
CVE-2023-36824 Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis
Redis · Redis

EPSS 77%
High 7.3
CVE-2023-3643 Boss Mini document file inclusion
EPSS 75%
High 7.5
CVE-2023-34133 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated att…
SonicWall · GMS · Analytics

EPSS 73%
Medium 5.0
CVE-2023-1183 Arbitrary file write
Red Hat · Fedora · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8

EPSS 65%

Advisories

FSA-202302 Festo: Several vulnerabilities in FactoryViews 173 CVEs
WID-SEC-2023-1718 Microsoft Windows: Mehrere Schwachstellen 103 CVEs
SSA-146325 SSA-146325: Multiple Vulnerabilities in RUGGEDCOM ROX before V2.16 21 CVEs
ICSA-23-194-01 Siemens RUGGEDCOM ROX 21 CVEs
SSA-561322 SSA-561322: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3.4 13 CVEs
ICSA-23-194-04 Siemens SIMATIC MV500 Devices 13 CVEs
ICSA-23-194-06 Honeywell Experion PKS, LX and PlantCruise 9 CVEs
SUSE-SU-2023:2839-1 Security update for python-Django 2 CVEs
USN-6226-1 scipy vulnerabilities 2 CVEs
DLA-3495-1 php-dompdf - security update 2 CVEs