Vulnerabilitycritical

10 new vulnerabilities disclosed by Talos, including use-after

Cisco TalosSep 27, 2023 · 16:00 UTC (Sep 27, 2023)2 min read1

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-3421 CVE-2023-32653 CVE-2023-39453 CVE-2023-35002 CVE-2023-40163 CVE-2023-23567 CVE-2023-32284 CVE-2023-28393 CVE-2023-32614 CVE-2023-32541

Tags: cve-2023-3421 cve-2023-32653 cve-2023-39453 cve-2023-35002 cve-2023-40163 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-35002 +7 related CVEs CVE-2023-39453 CVE-2023-40163 CVE-2023-32284 CVE-2023-32614 CVE-2023-32653 CVE-2023-23567 CVE-2023-28393	A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1	9.8 group max	1%	PoC	Sep 25, 2023
CVE-2023-32541	A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520	7.8	<1%	PoC	Sep 27, 2023
CVE-2023-3421	Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page	8.8	1%		Jun 26, 2023

From the original article

2 min read at blog.talosintelligence.com

Cisco Talos disclosed 10 vulnerabilities over the past two weeks affecting a range of software, including the popular Google Chrome web browser. Attackers could exploit these vulnerabilities to carry out a variety of attacks, in some cases gaining the ability to execute remote code on the targeted machine.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.