CVE Vulnerability Catalog

Use after free vulnerability in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

A race condition vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

A race condition vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Type confusion vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

A use-after-free vulnerability in the Universal Plug and Play component (upnp.dll) allows an unauthorized attacker to execute code remotely over a network.

A race condition vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privileges locally.

A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Use after free vulnerability in Windows SDK allows an authorized attacker to elevate privileges locally.

Integer overflow vulnerability in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.

In ASP.NET Core, uncontrolled resource consumption allows an unauthorized attacker to perform a denial of service attack over a network.

A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

In Windows Collaborative Translation Framework, improper link resolution before file access ('link following') allows an authorized attacker to elevate privileges locally.

Code injection vulnerability in Microsoft Exchange Server. An unauthorized attacker can remotely execute code over the network.

Server-Side Request Forgery (SSRF) vulnerability in Microsoft Exchange Server. An authorized attacker can elevate privileges over a network.

Improper authorization vulnerability in Microsoft Exchange Server. An authorized attacker can exploit this vulnerability to disclose information over a network.

Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

A TOCTOU race condition vulnerability in the Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Use-after-free vulnerability in Microsoft Office Word. An unauthorized attacker can exploit this flaw to execute code locally.

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.