CVE Vulnerability Catalog

A use-after-free vulnerability in the Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally. The issue stems from using memory after it has been freed.

A race condition vulnerability in the Windows Bluetooth Service is caused by improper synchronization during concurrent execution on shared resources. It allows an authorized attacker to elevate privileges locally.

A use-after-free vulnerability in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. The issue stems from using freed memory.

A use-after-free vulnerability in Windows NDIS allows an authorized attacker to elevate privileges over a network. The issue stems from using memory after it has been freed.

The vulnerability in Active Directory Certificate Services (AD CS) involves the use of an externally-controlled format string. This allows an authorized attacker to disclose information over a network.

A heap-based buffer overflow in the Windows Audio Service allows an authorized attacker to elevate privileges locally. The issue stems from improper memory management.

The vulnerability in the Windows Spaceport.sys driver is an out-of-bounds read. It allows an authorized attacker to disclose information over a network.

Use-after-free vulnerability in Windows Shell allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

The vulnerability in the Windows Spaceport.sys driver is an out-of-bounds read. It allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

Use-after-free vulnerability in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.

The vulnerability in Microsoft Exchange Server involves the use of a broken or risky cryptographic algorithm. It allows an unauthorized attacker to disclose information over a network.

The vulnerability in the Windows Storage Port Driver is an out-of-bounds read. It allows an unauthorized attacker to disclose information via a physical attack.

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.