http.sys DoS, multiple kernel privilege escalations, .Net signature spoofing and authorization bypass.