CVE Vulnerability Catalog

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. The attacker can modify data in a way detectable as an inconsistency.

Command injection vulnerability in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. The attacker can read data outside the intended memory bounds.

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Time-of-check time-of-use (TOCTOU) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper memory handling during data processing.