CVE Vulnerability Catalog

Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Windows GDI+ has a heap-based buffer overflow vulnerability, allowing an unauthorized attacker to execute code locally.

Use-After-Free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.

A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

A numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

A vulnerability in the Windows Universal Disk Format (UDFS) file system driver allows elevation of privilege. The flaw can be exploited locally by an authenticated attacker to gain higher privileges on the system.

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.

Unrestricted resource allocation vulnerability in Windows HTTP.sys. An unauthorized attacker can remotely cause a denial of service.

A race condition vulnerability in the Microsoft Windows App Store allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.

Improperly implemented security check for Secure Boot in Windows allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

A race condition in the Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

An integer underflow vulnerability in the Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.

A heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code remotely over a network.

Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

Use after free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.