CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited

Certains articles de veille peuvent faire l'objet de traduction automatique.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting Microsoft Office and Hewlett Packard Enterprise (HPE) OneView to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerabilities are listed below –

CVE-2009-0556 (CVSS score: 8.8) – A code injection vulnerability in Microsoft Office

Source : https://thehackernews.com/2026/01/cisa-flags-microsoft-office-and-hpe.html