Поиск уязвимостей

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Windows Bluetooth Security Feature Bypass Vulnerability

Windows DNS Query Information Disclosure Vulnerability

Microsoft SQL Elevation of Privilege Vulnerability

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.

An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it aka CID-2e90ca68b0d2.

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

Brotli Library Buffer Overflow Vulnerability

Auth Bypass in Google's Closure-Library

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.