# CVEs published 2010-12-03

5 CVEs were published on December 3, 2010: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2010-3613](https://cve.now/CVE-2010-3613.md): named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of si (no CVSS)
- [CVE-2010-3614](https://cve.now/CVE-2010-3614.md): named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly det (no CVSS)
- [CVE-2010-3615](https://cve.now/CVE-2010-3615.md): named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful (no CVSS)
- [CVE-2010-4254](https://cve.now/CVE-2010-4254.md): Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allow (no CVSS)
- [CVE-2010-4398](https://cve.now/CVE-2010-4398.md): Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP (CVSS 7.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-12-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.