Zstandard Compression Code Execution

The vulnerability of the compression function in the Zstandard library for data compression is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Exim Buffer Overflow DoS

A vulnerability in the Exim mail server is related to errors in processing objects in memory. Exploitation of the vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause denial of service...

Linux Pointer Arithmetic DoS

The vulnerability in the drivers/net/wireless/ath/ath6kl/usb.c file of Linux operating systems is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause service failures...

DirectX Disclosure Information

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

ws2ifsl.sys Code Execution

The vulnerability of the ws2ifsl.sys driver Winsock in the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system with administrator privileges through a specially created application...

Windows Store Installer Privilege Escalation

The vulnerability of the Windows Store Installer component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Audio Privilege Escalation

The vulnerability of the Windows Audio service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

Jet Database Engine Code Execution

The vulnerability of the Jet Database Engine database management system for the Windows operating system exists due to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft Graphics Components Unauthorized Access

The vulnerability of Microsoft Graphics Components in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Win32k RCE

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode using a specially created application...

NVIDIA GeForce Quadro Tesla Code Execution

The vulnerability of 3D vision software from NVIDIA’s GeForce, Quadro, and Tesla products is related to errors in link processing. Exploiting this vulnerability can allow attackers to execute arbitrary code, cause service failures, or gain increased privileges...

FortiOS Security Configuration Bypass

The vulnerability of the FortiOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using specially crafted SSL/TLS or HTTP traffic...

Windows RDP DoS

The vulnerability of the RDP protocol implementation in Windows operating systems is related to errors in processing RDP requests. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

LibreOffice LibreLogo Code Execution

The vulnerability of the LibreLogo software module in the LibreOffice office software package stems from errors in URL processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially crafted file...

VBScript Script Handler Code Execution

The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

PT-2019-5545

Name of the Vulnerable Software and Affected Versions SQLite versions 3.30.1 and earlier Description The issue is related to errors in handling numbers, which can be exploited by a remote attacker to cause a denial of service. It is also reported that certain SELECT statements with a nonexistent...

JDK: Failure to privatize a value pulled out of the loop by versioning

All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the...

PT-2019-3208

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows Audio Service. It occurs when a malformed parameter is processed, allowing an attacker to...

PT-2019-3304

Name of the Vulnerable Software and Affected Versions Windows Network Connectivity Assistant affected versions not specified Description The issue is related to errors in handling objects in memory. It may allow an attacker to elevate their privileges and execute arbitrary code using a specially...

PT-2019-3303

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to errors in handling objects in memory in the DirectWrite application programming interface of Windows operating systems. Exploitation of this issue may allow ...