Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
695210 source statements · aliases may refer to the same vulnerabilityGCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64
cve-program ·
Vendor product: Arm GNU Toolchain · Vendor product: GCC
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.
cve-program ·
Vendor product: Linux Kernal
Use-after-free in Linux kernel's netfilter: nf_tables component
cve-program ·
Vendor product: kernel
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to installation.
cve-program ·
Vendor product: n/a
Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v2
cve-program ·
Vendor product: Archer BE230 v1.2 · Vendor product: Archer AXE75 v2
Excessive time spent checking DH q parameter value
cve-program ·
Vendor product: OpenSSL
Use-after-free in Linux kernel's netfilter: nf_tables component
cve-program ·
Vendor product: kernel
Out-of-bounds write in Linux kernel's net/sched: sch_qfq component
cve-program ·
Vendor product: kernel
Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
cve-program ·
Vendor product: n/a
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
cve-program ·
Vendor product: n/a
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.