Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+10)
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
AFFECTED_PRODUCTS:
Microsoft Visual Studio,
Microsoft Visual Studio 2017,
Microsoft Visual Studio 2019
... (+4)
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Pc Manager
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker to elevate privileges locally.
Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+7)
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+4)
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1607
... (+9)
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1607
... (+9)
Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+7)
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+7)
Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+5)
Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+1)
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+1)
Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Python
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Online Server
... (+2)
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
AFFECTED_PRODUCTS:
Microsoft SharePoint Server,
Microsoft SharePoint Server,
Microsoft Sharepoint Enterprise Server
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft PowerPoint,
Microsoft Office Long Term Servicing Channel
... (+1)
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft SharePoint Server,
Microsoft SharePoint Server
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft SharePoint Server,
Microsoft SharePoint Server
... (+3)
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office,
Microsoft Office Long Term Servicing Channel
... (+1)
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft SharePoint Server,
Microsoft SharePoint Server,
Microsoft SharePoint Server
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Word,
Microsoft Office Long Term Servicing Channel
... (+1)
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Word,
Microsoft Outlook
... (+3)
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Word,
Microsoft Office Long Term Servicing Channel
... (+1)
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office,
Microsoft Office Online Server
... (+2)
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office,
Microsoft Office Long Term Servicing Channel
... (+1)
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office,
Microsoft Office Long Term Servicing Channel
... (+1)
Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022 23h2,
Microsoft Windows 11 24h2,
Microsoft Windows Server 2025
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows 11 22h2,
Microsoft Windows 11 23h2,
Microsoft Windows Server 2022 23h2
... (+2)
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an adjacent network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+10)
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an unauthorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+7)
Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Double free in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+3)
Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+14)
Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+5)
Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+11)
Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022,
Microsoft Windows 10 21h2,
Microsoft Windows 10 22h2
... (+5)
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+4)
Improper link resolution before file access ('link following') in Windows Performance Recorder allows an authorized attacker to deny service locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+10)
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)