NVD disclosure day

Published threat advisories for March 5, 2024

CVE advisoryKnown Exploit

CVE-2024-23296

Apple Device Memory Corruption Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A memory corruption flaw in Apple operating systems allows an attacker with local access to bypass kernel memory protections. This could impact data integrity and system security for affected organizations. Apple has released updates to address this issue, and there are reports of it being exploited.

• CISA KEV

CVE advisoryCRITICAL

CVE-2023-7103

ZKSoftware UFace 5 could allow an external attacker to bypass login controls.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

An external attacker could bypass login controls on ZKSoftware Biometric Security Solutions UFace 5. This could allow them to enroll or modify users, potentially gaining administrative control of the system and unauthorized access to sensitive areas or data.