CVE Vulnerability Catalog

In Microsoft Windows Speech, a use-after-free vulnerability allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

Use-After-Free vulnerability in DNS Server allows an authorized attacker to execute code remotely over the network. The issue stems from improper memory management when processing specially crafted DNS queries.

Use after free vulnerability in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.

Microsoft Windows App Store has a use of uninitialized resource vulnerability that allows an authorized attacker to disclose information locally.

A heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

A use-after-free vulnerability exists in the Microsoft Brokering File System. This allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.

A race condition vulnerability was found in Windows App Installer due to improper synchronization of shared resources. This flaw allows an authorized attacker to elevate privileges locally.

Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.

A vulnerability in SQL Server due to improper neutralization of special elements in SQL commands (SQL injection) allows an authorized attacker to elevate privileges over a network.

A vulnerability in ASP.NET Core allows an unauthorized attacker to perform a Denial of Service (DoS) attack by allocating resources without limits or throttling. The attack can be carried out remotely over a network.

A race condition in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Vulnerability in Windows Secure Kernel Mode due to improper validation of input consistency. An authenticated attacker can elevate privileges locally.

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

Vulnerability in Windows App Store due to a race condition in concurrent resource access. An unauthenticated attacker over the network can elevate privileges.

Relative path traversal vulnerability in Windows PowerShell allows an authorized attacker to execute code remotely.

Memory allocation with excessive size vulnerability in Windows LSASS. An unauthorized attacker can remotely cause a denial of service.