Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.
Null pointer dereference in Windows Remote Desktop allows an unauthorized attacker to deny service over a network.
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges with a physical attack.
Buffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Use after free in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network.
Improper access control in Windows HTTP.sys allows an unauthorized attacker to disclose information over a network.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally.
Integer underflow (wrap or wraparound) in Windows Update Stack allows an authorized attacker to disclose information locally.
Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Insufficiently protected credentials in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over a network.
Use after free in Core in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.