NVD disclosure day

Published threat advisories for February 16, 2022

CVE advisoryKnown Exploit

CVE-2021-3560

Polkit Local Privilege Escalation Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

An unprivileged local user can exploit a flaw in polkit to bypass security checks and gain root privileges. This could impact data integrity, confidentiality, and system availability for affected organizations. The primary business risk involves unauthorized administrative access.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2022-24086

Adobe Commerce Code Execution Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

Adobe Commerce and Magento Open Source are affected by an input validation flaw in the checkout process, allowing unauthorized code execution. This exposes businesses to data compromise and operational disruption. Attackers can exploit this remotely, posing a significant risk to affected systems.

NVD published: • CISA KEV