Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
698013 source statements · aliases may refer to the same vulnerabilityTiming attack against ECDSA signature generation
cve-program ·
Vendor product: OpenSSL
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using th…
cve-program ·
Vendor product: Apache Commons Beanutils
HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling
cve-program ·
Vendor product: netty
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on som…
cve-program ·
Vendor product: Apache Groovy
Double Free in VLC versions <= 3.0.6 leads to a crash.
cve-program ·
Vendor product: VLC Media Player
The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header, allowing input such as `Content-Length: 1 2` to be interpreted as having a value of `12`. The HTTP specification does not allow for spaces in …
cve-program ·
Vendor product: Node.js
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
cve-program ·
Vendor product: Processors supporting Simultaneous Multi-Threading
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
cve-program ·
Vendor product: HP Support Assistant
Infinite loop within Apache XercesJ xml parser
cve-program ·
Vendor product: Apache Xerces
An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
cve-program ·
Vendor product: VLC
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
cve-program ·
Vendor product: HP Support Assistant
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software.
cve-program ·
Vendor product: n/a
A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their priv…
cve-program ·
Vendor product: VMware Tools · Vendor product: VMware Tools · Vendor product: VMware Tools (open-vm-tools)
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
cve-program ·
Vendor product: HP Support Assistant
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
cve-program ·
Vendor product: HP Support Assistant
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
cve-program ·
Vendor product: HP Support Assistant
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
cve-program ·
Vendor product: HP Support Assistant
If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible t…
cve-program ·
Vendor product: Apache Tomcat
Apache Tomcat DoS with unexpected TLS packet
cve-program ·
Vendor product: Apache Tomcat
Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed comp…
cve-program ·
Vendor product: Node.js
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
cve-program ·
Vendor product: n/a
An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, lead…
cve-program ·
Vendor product: Videolabs
An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rr_decode function's return value is not checked, leading to a double…
cve-program ·
Vendor product: Videolabs
Apache Tomcat: Request header mix-up between HTTP/2 streams
cve-program ·
Vendor product: Apache Tomcat
An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages in mdns_recv, the return value of the mdns_read_header function is not checked, leading to…
cve-program ·
Vendor product: Videolabs
An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without checking for rec…
cve-program ·
Vendor product: Videolabs
An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-o…
cve-program ·
Vendor product: Videolabs
An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track of the available data in the message, pos…
cve-program ·
Vendor product: Videolabs
A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.
cve-program ·
Vendor product: n/a
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
cve-program ·
Vendor product: Apache Commons Compress
NULL pointer deref in signature_algorithms processing
cve-program ·
Vendor product: OpenSSL
Incorrect Transfer-Encoding handling with HTTP/1.0
cve-program ·
Vendor product: Apache Tomcat
The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a ti…
cve-program ·
Vendor product: Apache Tomcat
Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows
cve-program ·
Vendor product: Apache Tomcat
The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicit…
cve-program ·
Vendor product: Apache Tomcat
A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parame…
cve-program ·
Vendor product: Apache Tomcat
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method …
cve-program ·
Vendor product: jackson-databind
In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to w…
cve-program ·
Vendor product: Apache Tomcat
EncryptInterceptor does not provide complete protection on insecure networks
cve-program ·
Vendor product: Apache Tomcat
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.