Exploit / PoChighExploited in the wild

CISA adds JetBrains TeamCity and Windows flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsOct 5, 2023 · 13:03 UTC (Oct 5, 2023)1 min read5

Read at securityaffairs.com

Analyze CVE-2023-42793 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-42793 CVE-2023-28229 CVE-2023-4211

Tags: cve-2023-42793 cve-2023-28229 cve-2023-4211 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-28229	Windows CNG Key Isolation Service Local Privilege Escalation (CVE-2023-28229)	7.0	2%	KEV	Apr 11, 2023 KEV Oct 4, 2023
CVE-2023-4211	Use-After-Free in Arm Mali GPU Kernel Driver (Actively Exploited)	5.5	1%	KEV	Oct 1, 2023 KEV Oct 3, 2023
CVE-2023-42793	Authentication bypass in JetBrains TeamCity enables unauthenticated RCE	9.8	100%	KEVRansomwarePoC ×2	Sep 19, 2023 KEV Oct 4, 2023

From the original article

1 min read at securityaffairs.com

The U. S. CISA added JetBrains TeamCity and Windows vulnerabilities to its Known Exploited Vulnerabilities Catalog .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.