Ad Acrobat Document Cloud DoS

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to insufficient validation of input data. Exploiting thes...

stz2 decoder Heap Buffer Overflow DoS

The vulnerability of the stz2 decoder, which is part of the MPEG-4 multimedia platform GPAC decoding functionality, stems from incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its...

GPAC Decoder Confidential Data Compromise

The vulnerability of the SVHD decoder, a component of the MPEG-4 multimedia platform GPAC, lies in the lack of verification for the result of the addition arithmetic operation. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data, compromise its...

April 12, 2022—KB5012647 (OS Build 17763.2803)

None None...

Adobe Premiere Elements Null Pointer DoS

The vulnerability of Adobe Premiere Elements software-related video editing programs is related to the handling of the null pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Google Chrome Full-screen Mode Confidential Data Access DoS

The vulnerability of the full-screen browser mode implementation in Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service...

NVIDIA GPU Display Driver Heap Buffer Overflow DoS

The vulnerability of the nvlddmkm.sys component of the NVIDIA GPU Display Driver is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to access confidential data and cause system failures...

libavutil mem Heap Buffer Overflow DoS

The vulnerability of the avfreep function in the libavutil/mem.c component of the FFmpeg multimedia library relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

GDAL NetCDF Confidential Data Access

The vulnerability of the netCDF component of the GDAL transformation library for geospatial data is related to writing beyond buffer boundaries. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

libavfilter/vf_gblur Heap Buffer Overflow DoS

The vulnerability of the configinput function in the libavfilter/vfgblur.c file of the FFmpeg multimedia library involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

ImageIO Component DoS

The vulnerability of the ImageIO component in the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Oracle GraalVM Enterprise Edition Component 2D DoS

The vulnerability of the 2D component of the Oracle GraalVM Enterprise Edition exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

TCP Protocol TCP Implementation DoS

The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Xen Hypervisor DoS

The vulnerability of Xen hypervisors is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a attacker to cause service failures...

Lenovo Thin Installer DoS

The vulnerability of the optimization application for Lenovo Thin Installer is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to cause service failures...

Oracle WebLogic Server Unauthorized Access

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data, or to cause service failures using...

VirtualBox Core Component Confidential Data Access Data Compromise

The vulnerability of the Core component of the VirtualBox virtualization software is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

InnoDB DoS

The vulnerability of the InnoDB component in the MariaDB and MySQL database management systems is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

vcf_parse_format Heap Buffer Overflow DoS

The vulnerability of the vcfparseformat function in the library, which allows access to common file formats in HTSlib, lies in the check that only individual fields have excessive sizes. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

Node Set-value module Type Conversion Confidential Data Compromise

The vulnerability of the Node Set-value module is related to type conversion errors. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...