Microsoft

Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.

Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.