Windows Performance Monitor vulnerabilities

Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

A race condition vulnerability (concurrent execution using a shared resource with improper synchronization) in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

An integer underflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.

An integer overflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.