Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.
Windows Kernel Information Disclosure Vulnerability
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 and 11.5 is vulnerable to denial of service with a specially crafted ALTER TABLE statement. IBM X-Force ID: 261616.
Windows Kerberos Denial of Service Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
DHCP Server Service Denial of Service Vulnerability
Windows Kernel Information Disclosure Vulnerability
The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders.
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Windows Group Policy Security Feature Bypass Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft AllJoyn API Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Windows Hyper-V Information Disclosure Vulnerability
HTTP.sys Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above.
Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
Microsoft QUIC Denial of Service Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Windows CryptoAPI Denial of Service Vulnerability
Windows Peer Name Resolution Protocol Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
DHCP Server Service Denial of Service Vulnerability
DHCP Server Service Denial of Service Vulnerability
Windows Extended Negotiation Denial of Service Vulnerability
Bowser.sys Denial of Service Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally.
Windows CSC Service Information Disclosure Vulnerability
Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability
Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.
An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability'.
Remote Procedure Call Runtime Denial of Service Vulnerability
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability
Remote Procedure Call Runtime Denial of Service Vulnerability