CVE-2023-22292
https://notcve.org/view.php?id=CVE-2023-22292
Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. Una excepción no detectada para algunos software Intel Unison puede permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a través del acceso local. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html • CWE-248: Uncaught Exception CWE-755: Improper Handling of Exceptional Conditions •
CVE-2023-22285
https://notcve.org/view.php?id=CVE-2023-22285
Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. Un control de acceso inadecuado para algunos software Intel Unison puede permitir que un usuario no autenticado permita potencialmente la denegación de servicio a través del acceso a la red. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html • CWE-284: Improper Access Control •
CVE-2023-22337
https://notcve.org/view.php?id=CVE-2023-22337
Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. La validación de entrada incorrecta para algunos software Intel Unison puede permitir que un usuario no autenticado habilite potencialmente la denegación de servicio a través del acceso a la red. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html • CWE-20: Improper Input Validation •
CVE-2023-36860
https://notcve.org/view.php?id=CVE-2023-36860
Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. La validación de entrada incorrecta para algunos software Intel Unison puede permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a través del acceso a la red. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html • CWE-20: Improper Input Validation •
CVE-2023-42852 – webkitgtk: Processing web content may lead to arbitrary code execution
https://notcve.org/view.php?id=CVE-2023-42852
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution. Se solucionó un problema lógico con controles mejorados. Este problema se solucionó en iOS 17.1 y iPadOS 17.1, watchOS 10.1, iOS 16.7.2 y iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. • http://seclists.org/fulldisclosure/2023/Oct/19 http://seclists.org/fulldisclosure/2023/Oct/22 http://seclists.org/fulldisclosure/2023/Oct/23 http://seclists.org/fulldisclosure/2023/Oct/24 http://seclists.org/fulldisclosure/2023/Oct/25 http://seclists.org/fulldisclosure/2023/Oct/27 http://www.openwall.com/lists/oss-security/2023/11/15/1 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RPPMOWFYZODONTA3RLZOKSGNR4DELGG2 https://lists.fedoraproject.org • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •