| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject |
| Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally. |
| Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
| Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. |
| Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. |
| Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
| Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. |
| Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. |
| Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data across adjacent heap allocations. This vulnerability was fixed in Thunderbird 158. |
