Week 40, 2023

2–8 October 2023

New CVEs: 486
Critical: 37
High: 120
Newly exploited: 7
Advisories: 196
Malicious pkgs: 43

Newly exploited 7

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 10.0
CVE-2023-22515 KEV Oct 5, 2023 · ransomware Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in …
Atlassian · Confluence Data Center · Confluence Server

EPSS 99%
Critical 10.0
CVE-2023-40044 KEV Oct 5, 2023 · ransomware WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
Progress Software · WS_FTP Server

EPSS 90%
High 7.8
CVE-2023-42824 KEV Oct 5, 2023 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Ap…
Apple · iOS and iPadOS
Critical 9.8
CVE-2023-42793 KEV Oct 4, 2023 · ransomware In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
JetBrains · TeamCity

EPSS 100%
High 7.0
CVE-2023-28229 KEV Oct 4, 2023 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 1.7%
Medium 5.5
CVE-2023-4211 KEV Oct 3, 2023 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
Arm · Valhall GPU Kernel Driver · Arm 5th Gen GPU Architecture Kernel Driver · Bifrost GPU Kernel Driver
High 8.8
CVE-2023-5217 KEV Oct 2, 2023 Electron affected by libvpx's heap buffer overflow in vp8 encoding
Google · Chrome · libvpx

EPSS 49%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 10.0
CVE-2023-22515 Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in …
Atlassian · Confluence Data Center · Confluence Server

EPSS 99%
Critical 9.8
CVE-2023-5399 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tampering of files on the person…
Schneider Electric · C-Bus Toolkit

EPSS 36%
Critical 9.8
CVE-2023-20101 A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has …
Cisco · Cisco Emergency Responder

EPSS 2.6%
Critical 9.8
CVE-2023-43892 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is ex…
EPSS 2.2%
Critical 9.8
CVE-2023-44011 An issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the layout.master skin file at the Skin management …
EPSS 1.8%
Critical 9.8
CVE-2023-45311 Code injection in fsevents
EPSS 1.7%
Critical 9.8
CVE-2023-38703 PJSIP has use-after-free vulnerability in SRTP media transport
pjsip · pjproject

EPSS 1.6%
Critical 9.8
CVE-2023-3656 Unauthenticated Remote Code Execution
PoS/ Dienstleistung, Entwicklung & Vertrieb · cashIT! - serving solutions.

EPSS 1.2%
Critical 10.0
CVE-2022-47893 NetMan 204 Remote Code Execution
Riello UPS · NetMan 204

EPSS 1.2%
Critical 9.1
CVE-2023-38701 Hydra's committed UTxOs at Commit validator and UTxOs at Initial validator can be spent arbitrarily by anyone
input-output-hk · hydra

EPSS 1.1%
Critical 9.7
CVE-2023-42809 Redisson unsafe deserialization vulnerability
redisson · redisson

EPSS 1.1%
Critical 9.8
CVE-2023-4494 Easy Chat Server Stack-based buffer overflow vulnerability
EFS Software · Easy Chat Server
Critical 9.8
CVE-2023-4491 Easy Address Book Web Server Buffer overflow vulnerability
EFS Software · Easy Address Book Web Server
Critical 9.8
CVE-2023-32485 Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this …
Dell · Dell SmartFabric Storage Software
Critical 9.8
CVE-2023-5391 A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted system by sending a sp…
Schneider Electric · EcoStruxure™ Power Monitoring Expert · EcoStruxure Power SCADA Operation with Advanced Reports · EcoStruxure Power Operation (EPO) with Advanced Reports

All 37 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

ICSA-23-278-01 Hitachi Energy AFS65x,AFF66x, AFS67x, and AFR67x Series Products 14 CVEs
USN-6412-1 linux, linux-aws, linux-aws-6.2, linux-azure, linux-azure-6.2, linux-azure-fde-6.2, linux-gcp, linux-gcp-6.2, linux-hwe-6.2, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-6.2, linux-oracle, linux-raspi, linux-starfive vulnerabilities 13 CVEs
USN-6405-1 thunderbird vulnerabilities 11 CVEs
USN-6404-1 firefox vulnerabilities 8 CVEs
DLA-3601-1 thunderbird - security update 4 CVEs
DSA-5513-1 thunderbird - security update 4 CVEs
openSUSE-SU-2023:0293-1 Security update for exim 3 CVEs
USN-6411-1 exim4 vulnerabilities 3 CVEs
DSA-5512-1 exim4 - security update 3 CVEs
SUSE-SU-2023:3975-1 Security update for python-gevent 1 CVEs