Exploit / PoCcriticalExploited in the wild

CISA adds ownCloud and Google Chrome bugs to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsDec 1, 2023 · 11:04 UTC (Dec 1, 2023)2 min read4 · 1 read

Read at securityaffairs.com

Analyze CVE-2023-6345 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-6345 CVE-2023-49103 CVE-2023-5217

Tags: cve-2023-6345 cve-2023-49103 cve-2023-5217 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-49103	Unauthenticated phpinfo credential leak in ownCloud graphapi	7.5	78%	KEV	Nov 21, 2023 KEV Nov 30, 2023
CVE-2023-5217	Heap Buffer Overflow in Google Chromium libvpx (CVE-2023-5217) Added to CISA KEV	8.8	49%	KEVPoC	Sep 28, 2023 KEV Oct 2, 2023
CVE-2023-6345	Integer Overflow in Google Chrome's Skia Enables Sandbox Escape (Actively Exploited)	9.6	16%	KEV	Nov 29, 2023 KEV Nov 30, 2023

From the original article

2 min read at securityaffairs.com

US CISA added ownCloud and Google Chrome vulnerabilities to its Known Exploited Vulnerabilities catalog. The U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.