Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
695929 source statements · aliases may refer to the same vulnerabilityHCL BigFix Web Reports authorized users may perform HTML injection.
cve-program ·
Vendor product: HCL BigFix
HCL BigFix Web Reports authorized users may see sensitive information in clear text
cve-program ·
Vendor product: HCL BigFix
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recove…
cve-program ·
Vendor product: RSA BSAFE Crypto-J
Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
cve-program ·
Vendor product: Intel(R) Wireless Bluetooth(R)
A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to t…
cve-program ·
Vendor product: Cisco Secure Client
When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.
cve-program ·
Vendor product: openEuler:kernel
Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
cve-program ·
Vendor product: Intel(R) Wireless Bluetooth(R)
Possible request smuggling in HTTP/2 due missing validation
cve-program ·
Vendor product: io.netty:netty-codec-http2
Response mix-up with WebSocket concurrent send and close
cve-program ·
Vendor product: Apache Tomcat
Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.
cve-program ·
Vendor product: net.sourceforge.htmlunit:htmlunit
Microsoft Outlook Information Disclosure Vulnerability
cve-program ·
Vendor product: Microsoft Office 2019 · Vendor product: Microsoft 365 Apps for Enterprise · Vendor product: Microsoft Office LTSC 2021
Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files
cve-program ·
Vendor product: netty
Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node --debug` or `node debug`, it listens to port 5858 on all interfaces by default. This may allow re…
cve-program ·
Vendor product: Node.js
Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse() to determine the URL hostname, that hostname can be spoofed by…
cve-program ·
Vendor product: Node.js
Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigg…
cve-program ·
Vendor product: Node.js
Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated res…
cve-program ·
Vendor product: Node.js
A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other…
cve-program ·
Vendor product: PackageKit
Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
cve-program ·
Vendor product: OpenSSL
Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST…
cve-program ·
Vendor product: Spring Framework
RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
cve-program ·
Vendor product: Spring Framework
A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.
cve-program ·
Vendor product: n/a
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usa…
cve-program ·
Vendor product: Netty
User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges
cve-program ·
Vendor product: SUSE Enterprise Storage 5 · Vendor product: SUSE Linux Enterprise Server 12-SP2-BCL · Vendor product: SUSE Linux Enterprise Server 12-SP2-LTSS
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter …
cve-program ·
Vendor product: Spring Framework
There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower th…
cve-program ·
Vendor product: binutils
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
cve-program ·
Vendor product: Visual Studio Code
A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their …
cve-program ·
Vendor product: kernel
There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. …
cve-program ·
Vendor product: binutils
There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is t…
cve-program ·
Vendor product: binutils
A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This fla…
cve-program ·
Vendor product: binutils
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging …
cve-program ·
Vendor product: Spring Framework
There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greates…
cve-program ·
Vendor product: binutils
Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
cve-program ·
Vendor product: Intel(R) Processors
An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryEx…
cve-program ·
Vendor product: Apache Tomcat
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can …
cve-program ·
Vendor product: Netty
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
cve-program ·
Vendor product: Intel(R) processors which
Visual Studio Code Remote Code Execution Vulnerability
cve-program ·
Vendor product: Visual Studio Code
A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on conc…
cve-program ·
Vendor product: Apache Tomcat
Visual Studio Code Spoofing Vulnerability
cve-program ·
Vendor product: Visual Studio Code
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.