CVE-2025-47908

A flaw was found in github.com/rs/cors. The middleware exhibits excessive heap memory allocation when handling preflight requests containing a lengthy, comma-separated value in the Access-Control-Request-Headers ACRH header. This vulnerability allows an attacker to send a specially crafted HTTP...

Description of the security update for SharePoint Server Subscription Edition: April 8, 2025 (KB5002705)

Description of the security update for SharePoint Server Subscription Edition: April 8, 2025 KB5002705 Applies To SharePoint Server Subscription Edition Summary This security update resolves a Microsoft SharePoint remote code execution vulnerability. To learn more about the vulnerability, see the...

Description of the security update for Excel 2016: March 11, 2025 (KB5002696)

Description of the security update for Excel 2016: March 11, 2025 KB5002696 Applies To Excel 2016 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common...

io.quarkus:quarkus-elytron-security-deployment (0.17.0), io.quarkus:quarkus-keycloak-deployment (0.17.0) +10 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.17.0)

io.quarkus:quarkus-resteasy MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.17.0 - io.quarkus:quarkus-keycloak-deployment 0.17.0 -...

io.quarkus:quarkus-elytron-security-deployment (0.18.0), io.quarkus:quarkus-keycloak-deployment (0.18.0) +16 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.18.0)

io.quarkus:quarkus-resteasy MAVEN version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.18.0 - io.quarkus:quarkus-keycloak-deployment 0.18.0 -...

io.quarkus:quarkus-amazon-lambda (0.13.0), io.quarkus:quarkus-amazon-lambda-deployment (0.13.0) +8 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.13.0)

io.quarkus:quarkus-resteasy MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-amazon-lambda 0.13.0 - io.quarkus:quarkus-amazon-lambda-deployment 0.13.0 -...

Description of the security update for SharePoint Server 2019: April 9, 2024 (KB5002580)

Description of the security update for SharePoint Server 2019: April 9, 2024 KB5002580 Applies To SharePoint Server 2019 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and...

io.quarkus:quarkus-elytron-security-deployment (0.13.3), io.quarkus:quarkus-resteasy (0.13.3) +21 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (0.13.3)

io.quarkus:quarkus-undertow MAVEN version 0.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.13.3 - io.quarkus:quarkus-resteasy 0.13.3 -...

Description of the security update for Publisher 2013: August 8, 2023 (KB5002391)

Description of the security update for Publisher 2013: August 8, 2023 KB5002391 Summary This security update for Microsoft Office provides defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV230003. Note: To apply th...

Description of the security update for Office 2016: July 11, 2023 (KB4475581)

Description of the security update for Office 2016: July 11, 2023 KB4475581 Applies To Office Standard 2016 Office Professional 2016 Office Professional Plus 2016 Office Home and Business 2016 Office Home and Student 2016 Summary This security update resolves a Microsoft Outlook remote code...

Description of the security update for Outlook 2013: July 11, 2023 (KB5002432)

Description of the security update for Outlook 2013: July 11, 2023 KB5002432 Summary This security update resolves a Microsoft Outlook spoofing vulnerability, and Microsoft Outlook security feature bypass vulnerability. To learn more about the vulnerabilities, see the following security advisorie...

End of support for Office 2016 and Office 2019

End of support for Office 2016 and Office 2019 Applies To Office 2019 Office 2016 Get help with Copilot Tell me about end of support for Office 2016 for Mac. Show me how to remove the conflicting 2013 app. Support for Office 2016 and Office 2019 ended on October 14, 2025. While your Office 2016 a...

Maximizing Performance with Wallarm Filtering Nodes in Amazon’s Global Infrastructure

Introduction In todays digital landscape, ensuring the security and performance of web applications is paramount. To achieve optimal protection against cyber threats, organizations deploy web application and API protection WAAPs like Wallarm. However, to truly leverage the benefits of Wallarm,...

Description of the security update for SharePoint Foundation 2013: March 14, 2023 (KB5002367)

Description of the security update for SharePoint Foundation 2013: March 14, 2023 KB5002367 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see ​​​​Microsoft Common Vulnerabilities and Exposures CVE-2023-23395...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.9.1.final), io.quarkus:quarkus-azure-functions-http-deployment (1.9.1.final) +34 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.9.1.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.9.1.final -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.0.alpha2), io.quarkus:quarkus-azure-functions-http-deployment (1.3.0.alpha2) +30 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.3.0.alpha2)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.3.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.3.0.alpha2 -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.11.5.final), io.quarkus:quarkus-azure-functions-http-deployment (1.11.5.final) +51 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.11.5.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.11.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.11.5.final -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.10.1.final), io.quarkus:quarkus-azure-functions-http-deployment (1.10.1.final) +34 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.10.1.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.10.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.10.1.final -...

Description of the security update for Office 2016: November 8, 2022 (KB3191869)

Description of the security update for Office 2016: November 8, 2022 KB3191869 Applies To Office Standard 2016 Office Professional 2016 Office Professional Plus 2016 Office Home and Business 2016 Office Home and Student 2016 Summary There is a Microsoft Office update for defense-in-depth updates ...

Description of the security update for Visio 2013: September 13, 2022 (KB5002017)

Description of the security update for Visio 2013: September 13, 2022 KB5002017 Summary This security update resolves a Microsoft Office Visio remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-38010. Note: To...