Threat database

647 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Unrated	–	EPSS 0.6%	CVE-2025-1150Microsoft · GNU Binutils ld libbfd.c bfd_malloc memory leak UnratedEPSS 0.6%2025-02-02GCVE DatabaseCVE-2025-1150 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.6%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-02-02
Unrated	–	EPSS 0.7%	CVE-2025-1180Microsoft · GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption UnratedEPSS 0.7%2025-02-02GCVE DatabaseCVE-2025-1180 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.7%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-02-02
Unrated	–	EPSS 0.8%	CVE-2025-1178Microsoft · GNU Binutils ld libbfd.c bfd_putl64 memory corruption UnratedEPSS 0.8%2025-02-02GCVE DatabaseCVE-2025-1178 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.8%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-02-02
Unrated	–	EPSS 0.7%	CVE-2025-1176Microsoft · GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow UnratedEPSS 0.7%2025-02-02GCVE DatabaseCVE-2025-1176 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.7%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2025-02-02
Medium	–	EPSS 0.4%	CVE-2024-45159Microsoft · An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables optional authentication of the client, if the client-provided certificate does not have appropriate values in if keyUsage or extKeyUsage extensions, then the... MediumEPSS 0.4%2024-11-28GCVE DatabaseCVE-2024-45159 CVE-2024-45159 is a vulnerability in Mbed TLS versions 3.x prior to 3.6.1 related to TLS 1.3 client certificate authentication. When a server enables optional client authentication, the client certificate's keyUsage or extKeyUsage extensions may not be properly validated, potentially leading to incorrect authentication decisions. The issue affects Microsoft products including Azure Linux and CBL Mariner 2.0. No CVSS score is provided, and no known exploits are reported in the wild. Patch status is not confirmed due to lack of vendor advisory details. EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2024-11-28
High	7.5	EPSS 0.7%	CVE-2024-23744Microsoft · An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions. High7.5EPSS 0.7%2024-11-28GCVE DatabaseCVE-2024-23744 CVE-2024-23744 is a vulnerability in Mbed TLS version 3.5.1 where a client sending a TLS 1.3 ClientHello message without extensions can cause a persistent handshake denial. This issue affects Microsoft products including Azure Linux and CBL Mariner 2.0. No CVSS score is provided, and no known exploits are reported in the wild. The vendor advisory does not specify patch availability or mitigation steps. EPSS 0.7%Report on CVE-2024-23744 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2024-11-28
High	8.2	EPSS 0.8%	CVE-2024-28960Microsoft · An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0 and Mbed Crypto. The PSA Crypto API mishandles shared memory. High8.2EPSS 0.8%2024-11-28GCVE DatabaseCVE-2024-28960 CVE-2024-28960 is a vulnerability in Mbed TLS versions 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, as well as Mbed Crypto. The issue involves the PSA Crypto API mishandling shared memory, which could lead to improper access control. No CVSS score or detailed impact information is provided. There are no known exploits in the wild and no patch links explicitly stated in the input data. The affected software includes specific versions of Mbed TLS and Mbed Crypto. EPSS 0.8%Report on CVE-2024-28960 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2024-11-28

Showing 641–647 of 647 results