CVE Vulnerability Catalog

A type confusion vulnerability in .NET Core allows an unauthorized attacker to cause a denial of service over a network.

A vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network by including functionality from an untrusted control sphere.

An XSS vulnerability in Visual Studio Code allows an unauthorized attacker to locally bypass a security feature due to improper input neutralization during web page generation.

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow vulnerability in Windows Media Foundation. An unauthorized attacker can remotely execute code.

A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow vulnerability in Windows Media Foundation. An unauthorized attacker can remotely execute code.

Use-after-free vulnerability in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.

Improper access control in the Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.

A time-of-check time-of-use (TOCTOU) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

A stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

A relative path traversal vulnerability in Windows Admin Center allows an authorized attacker to execute code over a network.

Heap-based buffer overflow vulnerability in Windows Network File System allows an authorized attacker to elevate privileges over a network.