Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabExplore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Recent security developmentsRelease of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a network.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows COM allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPT_CLASS_STRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any destructor path. When the legacy engine is selected, classify_use_pre_adapted_templates is enabled, and an attacker can write the output-basename .a file, the success or rejection path can pass file-controlled pointers to ~ADAPT_CLASS_STRUCT and operator delete, causing memory corruption and denial of service. This issue is fixed in version 5.5.4.
No structured fix or guidance is available here. Check the latest publisher advisory.
Public exploit reference
Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as untrusted bytes to an application that draws text with a nonzero stroke width, forcing the glyph-load failure path. This can corrupt memory or crash the process. This issue is fixed in version 13.0.0.
No structured fix or guidance is available here. Check the latest publisher advisory.
Public exploit reference
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
In the Linux kernel, the following vulnerability has been resolved:
Review the recorded instructions. Guidance may be a workaround rather than a fixed version.
Exploitation not established
In the Linux kernel, the following vulnerability has been resolved:
Review the recorded instructions. Guidance may be a workaround rather than a fixed version.
Exploitation not established
In the Linux kernel, the following vulnerability has been resolved:
Review the recorded instructions. Guidance may be a workaround rather than a fixed version.
Exploitation not established
