CVE Vulnerability Catalog

Use-after-free in Microsoft Office allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.

An out-of-bounds read vulnerability in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.

A buffer over-read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

An incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.

An out-of-bounds read vulnerability in Windows SMB Client allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

An out-of-bounds read vulnerability in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.

A Cross-Site Scripting (XSS) vulnerability in Microsoft Office SharePoint is due to improper input neutralization during web page generation. It allows an authorized attacker to perform spoofing over a network.

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.