CVE-2021-0325

In ih264dparsepslice of ih264dparsepslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9...

CVE-2021-0332

In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID:...

CVE-2021-23878

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

Large number of vulnerabilities fixed in Xerox FreeFlow Print Server

Xerox has fixed a large number of vulnerabilities in Xerox FreeFlow Print Server. The vulnerabilities are in the following underlying components: Microsoft Windows 10 Java 8 Firefox Xerox has released updates to fix the vulnerabilities in Freeflow print server. For more information, see the...

Microsoft Windows Information Disclosure Vulnerability

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in the Microsoft Windows backup engine. The following products and editions are affected:Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit...

Microsoft PowerShell Utility Security Feature Issue Vulnerability

Microsoft PowerShell Utility is a utility module from Microsoft Corporation USA. The module includes many of the basic administrative commands for PowerShell. Microsoft PowerShell Utility is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Versio...

Microsoft Windows Fax Service Security Vulnerability

Microsoft Windows Fax Service is a functional component service from Microsoft Corporation USA. It is used to specify fax settings, including how to send, receive, view, and print. A security vulnerability exists in Microsoft Windows Fax Service. The following products and editions are affected:...

Microsoft Windows TCP/IP component security vulnerability

The Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A security vulnerability exists in the Microsoft Windows TCP/IP component. The following products and editions are affected: Windows 10 Version 1803 for...

Microsoft Windows Installer Security Feature Issue Vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security feature vulnerability exists in Microsoft Windows Installer. The following products and editions are affected: Windows 10...

Microsoft Directx Information Disclosure Vulnerability

Microsoft Directx is a tool from Microsoft that is designed to fix Windows anomalies. This software repair tool automatically updates C++ components and fixes the 0xc000007b problem exception. An information disclosure vulnerability exists in Microsoft DirectX. The following products and editions...

Microsoft Win32k Security Feature Issue Vulnerability

Microsoft Win32k is a system file for Windows multi-user administration from Microsoft Corporation USA. A security feature vulnerability exists in Microsoft Win32k. The following products and editions are affected: Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit...

Microsoft Windows VMSwitch Information Disclosure Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows VMSwitch. The following products and editions are affected:Windows 10 Version 1803 for x64-based Systems,Windows 10...

Microsoft Windows Console Driver Security Vulnerability

Microsoft Windows Console Driver is a console driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Console Driver. The following products and versions are affected:Windows 10 Version 2004 for 32-bit Systems,Windows 10 Version 2004 for ARM64-based...

CVE-2021-22502

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter OBR product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server...

Linux kernel 安全漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A local elevation of privilege vulnerability exists in Linux kernel versions prior to 5.10.13. The vulnerability stem...

Huawei Taurus-AL00A 资源管理错误漏洞

The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in Huawei Taurus-AL00A version 10.0.0.1 C00E1R1P1. The vulnerability stems from the program not setting multi-thread reentry protection when calling a function. An attacker can exploit...

CVE-2021-25245

An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of settings informaiton...

CVE-2021-0350

In ged, there is a possible system crash due to an improper input validation. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID:...

CVE-2021-0344

In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05437558...

CVE-2021-0346

In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580...