NVD disclosure day

Published threat advisories for January 23, 2024

CVE-2023-36177

Snapcast Remote Code Execution via JSON-RPC API

Halo Surface Signal: 3 out of 5 — possibly public-facing.

A critical vulnerability in Snapcast's JSON-RPC API allows remote attackers to execute arbitrary code and access sensitive information. This issue impacts systems using Snapcast, a multi-room audio synchronization technology, when its API is reachable over a network via crafted requests. Organizations should verify if

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2024-23222

Apple Safari: Code Execution Risk From Malicious Web Content.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A type confusion vulnerability in Apple's WebKit allows for arbitrary code execution when processing malicious web content. This could lead to unauthorized access to systems and data on affected Apple devices, posing a business risk to organizations.

NVD modified: NVD date unavailable • CISA KEV