A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service which becomes unresponsive after this flaw is triggered.

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange allowing a malicious TLS server to cause a TLS client to panic.

In the Linux kernel through 5.13.7 an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Storage Spaces Controller Elevation of Privilege Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows Graphics Component Font Parsing Remote Code Execution Vulnerability

ASP.NET Core and Visual Studio Information Disclosure Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Defender Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability