0day 2021 accouting application assembly-language asset asset-threat-mapping assets attack-tree attacker authentication authorization availability binary c cnnvd compilation confidentiality container containerd control-groups cve data-binding deserialization device-driver directory-service docker elf factors gdpr header hypervisor iam identity identity-service information-security integrity kernel ldap linux man-in-the-middle mfa microsoft model namespace new-year nist nvd object oci owasp-top-10 pasta personal-identifiable-information pii rce risk risk-management runc security stride subject symbol threat threat-classification-model threat-model trike unionfs vulnerability windbg windows