CVE Vulnerability Catalog

A heap-based buffer overflow in the Windows kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.

A use-after-free vulnerability in the Windows Kernel allows an authenticated attacker to elevate privileges locally.

An unhandled exception in Windows Server Update Service (WSUS) allows an unauthorized attacker to perform tampering over a network. This vulnerability could compromise the integrity of updates.

A heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

The Windows Unified Consent System component contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

A race condition due to improper synchronization of shared resources in Windows Runtime allows an authorized attacker to elevate privileges locally.

A race condition in Windows USB Driver allows an authorized attacker to elevate privileges locally.

A race condition vulnerability exists in Windows Operating Systems during concurrent execution using a shared resource. An authorized attacker can exploit this to elevate privileges locally.

The Windows Image Acquisition component contains a null pointer dereference vulnerability that allows an authorized attacker to elevate privileges locally.

A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

A use-after-free vulnerability exists in the Windows TCP/IP stack. This allows an authorized attacker to elevate privileges locally.

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

A use-after-free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Active Directory Federation Services (ADFS) allows an unauthorized attacker to perform a DoS attack over the network.

A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted data.

A buffer overflow vulnerability in the entry handler of the TraceEvent() system call could allow a local attacker to cause information disclosure, data tampering, or a crash of the QNX Neutrino kernel.