Microsoft

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.

Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.