Threats affecting pkg:generic/wolfssl

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.

Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally.

CVE-2026-122475 is a high-severity vulnerability in Microsoft Windows 11 version 23H2 involving an untrusted pointer dereference in the Windows Storage Spaces Controller. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple builds of Windows 11 23H2 prior to specific fixed versions. An official fix is available from Microsoft.

CVE-2026-122474 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Windows Security Account Manager on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to bypass a security feature remotely over a network. The vulnerability has a medium severity rating with a CVSS score of 5.9. Official patches have been released to address this issue in multiple Windows 10 builds.

CVE-2026-122297 is a vulnerability in Microsoft Windows 10 Version 1607 involving the use of an uninitialized resource in the Kernel Transaction Manager. This flaw allows an authorized local attacker to disclose sensitive information. The issue affects multiple Windows 10 builds prior to specific fixed versions. A patch is available from Microsoft to address this vulnerability.

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows SMB allows an authorized attacker to execute code over a network.

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.