November 9, 2021—KB5007192 (OS Build 14393.4770) - EXPIRED

None None...

November 9, 2021—KB5007247 (Monthly Rollup)

None None...

November 9, 2021—KB5007245 (Security-only update)

None None...

PYSEC-2021-815

TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...

CVE-2021-41208

TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...

DjVu Library Loop DoS

The vulnerability of the reading component of the DjVu library for viewing, creating, and editing DjVu files in DjVuLibre lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

libxml2 Heap Buffer Overflow DoS

The vulnerability of the xmlmemory.c component of the libxml2 XML document analysis software involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Libxml2 Heap Buffer Overflow DoS

The vulnerability of XML object encoding functions in the Libxml2 library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially...

Libxml2 Heap Use After Free

The vulnerability of the xmllint component in the Libxml2 library is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created file...

Google Chrome ICU Memory Leak DoS

The vulnerability in the Google Chrome web browser, related to the ICU Unicode library, involves repeated memory release. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures through a specially created HTML pa...

Leptonica pixFewColorsOctcubeQuantMixed DoS

The vulnerability of the pixFewColorsOctcubeQuantMixed component in the Leptonica image processing library relates to reading data from buffers within acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

DjVu Library Uncontrolled Recursion DoS

The vulnerability of the sorting function in the library for viewing, creating, and editing DjVu files in DjVuLibre is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Ffmpeg filter_frame Heap Buffer Overflow DoS

The vulnerability of the filterframe component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

Exiv2 Heap Buffer Overflow DoS

The vulnerability of the Exiv2 metadata management library is related to the execution of operations outside the buffer in memory due to errors in metadata writing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

Klibc malloc Integer Overflow DoS

The vulnerability of the malloc function in the Klibc environment library is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Klibc integer overflow DoS

The vulnerability of the calloc function in the Klibc environment library is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

HgDriver Component Confidential Data Compromise

The vulnerability of the HgDriver component in the PHP Composer dependency manager is related to improper cleaning of Mercurial repository URLs. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures through the...

Unidirectional Link Detection DoS

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco NX-OS VXLAN Maintenance Failure

The vulnerability of the VXLAN Operation, Administration, and Maintenance OAM function of the Cisco NX-OS operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to trigger maintenance failures remotely...

Ffmpeg filter_intra Heap Buffer Overflow DoS

The vulnerability of the filterintra component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...