Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
695185 source statements · aliases may refer to the same vulnerabilityRace condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()
cve-program ·
Vendor product: kernel
Race condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()
cve-program ·
Vendor product: kernel
Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()
cve-program ·
Vendor product: kernel
Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()
cve-program ·
https://kernel.org/: kernel
Integer overflow in raid5_cache_count in Linux kernel
cve-program ·
https://mirrors.openanolis.cn/anolis/: kernel
NULL pointer deference in rfcomm_check_security in Linux kernel
cve-program ·
https://mirrors.openanolis.cn/anolis/: kernel
Dos in ZigBee device due to unsolicited encrypted rejoin response
cve-program ·
Vendor product: GSDK · Vendor product: SiSDK
Possible denial of service in X.509 name checks
cve-program ·
Vendor product: OpenSSL
RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
cve-program ·
Vendor product: RFC
Unbounded memory growth with session handling in TLSv1.3
cve-program ·
Vendor product: OpenSSL
Coreutils: heap overflow in split --line-bytes with very long lines
cve-program ·
https://git.savannah.gnu.org/gitweb/?p=coreutils.git: coreutils
blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init
cve-program ·
Vendor product: Linux · Vendor product: Linux
blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
cve-program ·
Vendor product: Linux · Vendor product: Linux
netfilter: allow exp not to be removed in nf_ct_find_expectation
cve-program ·
Vendor product: Linux · Vendor product: Linux
sysv: don't call sb_bread() with pointers_lock held
cve-program ·
Vendor product: Linux · Vendor product: Linux
powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
cve-program ·
Vendor product: Linux · Vendor product: Linux
ext4: avoid online resizing failures due to oversized flex bg
cve-program ·
Vendor product: Linux · Vendor product: Linux
netfilter: nf_tables: disallow timeout for anonymous sets
cve-program ·
Vendor product: Linux · Vendor product: Linux
PM / devfreq: Fix buffer overflow in trans_stat_show
cve-program ·
Vendor product: Linux · Vendor product: Linux
crypto: scomp - fix req->dst buffer overflow
cve-program ·
Vendor product: Linux · Vendor product: Linux
EDAC/thunderx: Fix possible out-of-bounds string access
cve-program ·
Vendor product: Linux · Vendor product: Linux
block: add check that partition length needs to be aligned with block size
cve-program ·
Vendor product: Linux · Vendor product: Linux
bpf: Defer the free of inner map when necessary
cve-program ·
Vendor product: Linux · Vendor product: Linux
f2fs: fix to avoid dirent corruption
cve-program ·
Vendor product: Linux · Vendor product: Linux
libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
cve-program ·
Vendor product: n/a
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.