CVE Vulnerability Catalog

A use-after-free vulnerability exists in Windows Hyper-V. This allows an authorized attacker to elevate privileges locally.

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

A heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. The vulnerability occurs during the processing of specially crafted graphics data.

Infinite loop vulnerability in Windows Active Directory. An unauthorized attacker can remotely cause a denial of service.

Use-After-Free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.

A race condition vulnerability due to improper synchronization of shared resources has been discovered in the Windows Win32K component. This flaw allows an authorized attacker to elevate privileges locally.

A race condition in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

A race condition in the Windows Win32K driver allows an authorized attacker to elevate privileges locally due to improper synchronization of shared resources. This vulnerability can be exploited to gain higher system privileges.

Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

A heap-based buffer overflow vulnerability in the Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to remotely cause a denial of service (DoS).

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

A use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

A relative path traversal vulnerability in Age of Empires II: Definitive Edition allows an unauthorized attacker to execute code over a network.

An infinite loop in Azure Active Directory allows an unauthorized attacker to deny service over a network.

In Azure Active Directory, a deserialization of untrusted data vulnerability allows an unauthorized attacker to perform a denial of service (DoS) attack over the network.

A command injection vulnerability in Visual Studio Code allows an unauthorized attacker to execute code locally by failing to properly neutralize special elements used in commands.

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

A race condition in Windows Clip Service allows an authorized attacker to elevate privileges locally.