Windows Partition Management Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally...

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network...

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally...

Windows Core Messaging Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

Skype for Business Spoofing Vulnerability

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

Windows Notification Elevation of Privilege Vulnerability

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...

Windows SMB Client Information Disclosure Vulnerability

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...

Microsoft Windows Speech Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

Windows Credential Guard Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

Windows Kerberos Elevation of Privilege Vulnerability

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...

Windows DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...

Windows iSCSI Target Service Denial of Service Vulnerability

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...

Win32k Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...

Windows Network File System Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...

Windows Group Policy Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

Windows TCP/IP Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

Microsoft Windows Search Component Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

Windows Shell Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows Speech Tampering Vulnerability

Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...

Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

Windows Event Logging Service Remote Code Execution Vulnerability

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

Windows NTFS Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network...

Windows USB Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally...

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Windows DNS Elevation of Privilege Vulnerability

Use after free in Windows DNS allows an authorized attacker to elevate privileges locally...

Microsoft Standard XPS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

Remote Desktop Gateway Service Elevation of Privilege Vulnerability

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

Microsoft Exchange Server Remote Code Execution Vulnerability

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

Copilot Studio Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...

Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network...

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...

Skype for Business and Lync Denial of Service Vulnerability

Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...