Поиск уязвимостей

Microsoft Exchange Information Disclosure Vulnerability

The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cert8.db file.

The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service

The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service

The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors.

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate.

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows COM Session Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows TDX Elevation of Privilege Vulnerability

Windows Default Folder Tampering Vulnerability

Windows Remote Code Execution Vulnerability

Windows PDF Remote Code Execution Vulnerability

Windows PDF Remote Code Execution Vulnerability