NVD disclosure day

Published threat advisories for June 13, 2024

CVE advisoryKnown Exploit

CVE-2024-32896

Android Privilege Escalation Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A logic error in Android's code can allow local privilege escalation, requiring user interaction. This impacts affected Android devices by potentially compromising data confidentiality and system integrity. The realistic business risk involves unauthorized access to sensitive information and system functions.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2024-34102

Adobe Commerce XML External Entity Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

Adobe Commerce and Magento are affected by a vulnerability allowing attackers to execute arbitrary code via crafted XML documents. This impacts system integrity and data confidentiality, posing a significant business risk. Organizations using affected versions should address this issue promptly to mitigate potential ex

NVD published: • CISA KEV