Microsoft

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network.

Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.

The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted…

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.