Patch Tuesday - March 2022

Microsoft's March 2022 updates include fixes for 92 CVEs including 21 from the Chromium project, which is used by their Edge web browser. None of them have been seen exploited in the wild, but three have been previously disclosed. CVE-2022-24512, affecting .NET and Visual Studio, and...

Microsoft Windows Codecs Library Multiple Vulnerabilities (March 2022)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by multiple code execution vulnerabilities. An attacker who successfully exploits these vulnerabilities could execute arbitrary code. Exploitation of the vulnerability requires that...

GSD-2022-1000677 ASoC: codecs: wcd938x: fix incorrect used of portid

ASoC: codecs: wcd938x: fix incorrect used of portid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

GSD-2022-1000590 ASoC: codecs: wcd938x: fix incorrect used of portid

ASoC: codecs: wcd938x: fix incorrect used of portid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

Microsoft Windows Codecs Library 代码注入漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. The application enables computers and devices to read High Efficiency Video Encoding or HEVC video. Microsoft HEVC Video Extensions has a remote code execution vulnerability and no details of the...

Microsoft Windows Codecs Library 代码注入漏洞

Microsoft VP9 Video Extensions is a popular video codec from Microsoft Corporation USA used for streaming over the Internet. Microsoft VP9 Video Extensions is vulnerable to remote code execution, and no details of the vulnerability are available...

Microsoft Windows Codecs Library 缓冲区错误漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. The application enables computers and devices to read High Efficiency Video Encoding or HEVC video. Microsoft HEVC Video Extensions has a remote code execution vulnerability and no details of the...

Microsoft Windows Codecs Library 代码注入漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. The application enables computers and devices to read High Efficiency Video Encoding or HEVC video. Microsoft HEVC Video Extensions has a remote code execution vulnerability and no details of the...

Microsoft Windows Codecs Library RCE (January 2022)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a...

GSD-2021-1002604 ASoC: codecs: wcd934x: handle channel mappping list correctly

ASoC: codecs: wcd934x: handle channel mappping list correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...

GSD-2021-1002515 ASoC: codecs: wcd934x: handle channel mappping list correctly

ASoC: codecs: wcd934x: handle channel mappping list correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

Moderate: Red Hat Security Advisory: Openshift Logging security and bug update (5.1.5)

An update is now available for OpenShift Logging 5.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in th...

Microsoft Windows Codecs Library信息泄露漏洞

The Microsoft Windows Codecs Library is a feature library for Microsoft Windows systems from Microsoft Corporation. An information disclosure vulnerability exists in Microsoft Windows Codecs Library. No information about this vulnerability is available at this time, so please stay tuned to CNNVD ...

Microsoft Windows Codecs Library 代码注入漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...

Microsoft Windows Codecs Library代码注入漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...

Microsoft Windows Codecs Library 权限许可和访问控制问题漏洞

The Microsoft Windows Codecs Library is a feature library for Microsoft Windows systems from Microsoft Corporation. A vulnerability exists in the Microsoft Windows Codecs Library due to permission and access control issues. The following products and editions are affected: Windows Server 2012 R2...

Microsoft Windows Codecs Library 代码注入漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...

python: Unsafe use of eval() on data retrieved via HTTP in the test suite

In Python3's Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP...

Microsoft Windows Codecs Library 代码注入漏洞

Microsoft Windows Media Foundation is a next-generation multimedia platform for Windows that enables developers, consumers, and content providers to embrace a new wave of advanced content with greater robustness, unparalleled quality, and seamless interaction. microsoft Windows Media Foundation...

Microsoft Windows Codecs 代码注入漏洞

Microsoft Windows Codecs is an operating system from Microsoft. It provides a multitasking graphical user interface. A code injection vulnerability exists in the Microsoft Windows Codecs Library. The following products and editions are affected:Windows Server 2008 R2 for x64-based Systems Service...