Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges.
CVSS Score
9.8
EPSS Score
0.002
Published
2019-05-13
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.
CVSS Score
7.8
EPSS Score
0.006
Published
2019-03-08
Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.
CVSS Score
8.2
EPSS Score
0.011
Published
2019-01-24
Page 10