Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Online Server
... (+2)
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft SharePoint Server,
Microsoft SharePoint Server,
Microsoft SharePoint Server
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Online Server
... (+2)
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Online Server
... (+2)
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Online Server
... (+2)
InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption in service. Exploitation of this issue requires...
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue require...
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op...
AFFECTED_PRODUCTS:
Adobe Dreamweaver
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Online Server
... (+2)
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office Long Term Servicing Channel
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Online Server
... (+2)
Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft SharePoint Server,
Microsoft SharePoint Server,
Microsoft SharePoint Server
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Pc Manager
Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Azure File Sync,
Microsoft Azure File Sync
Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.
AFFECTED_PRODUCTS:
Microsoft Windows 11 22h2,
Microsoft Windows 11 23h2,
Microsoft Windows 11 24h2
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022 23h2,
Microsoft Windows 11 24h2,
Microsoft Windows Server 2025
Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+3)
Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+24)
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+7)
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+7)
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Improper input validation in Windows Hyper-V allows an unauthorized attacker to deny service locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022 23h2,
Microsoft Windows 11 24h2,
Microsoft Windows Server 2025
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+19)
Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+10)
Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022,
Microsoft Windows 10 21h2,
Microsoft Windows 10 22h2
... (+5)
Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+8)
Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows 11 24h2,
Microsoft Windows Server 2025
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+21)
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+4)
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+10)
Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.
AFFECTED_PRODUCTS:
Microsoft Dataverse
Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Hardware Lab Kit,
Microsoft Windows Hardware Lab Kit,
Microsoft Windows Hardware Lab Kit
... (+2)
Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+21)
Improper authentication in Microsoft Defender for Identity allows an unauthorized attacker to perform spoofing over an adjacent network.