CVE Vulnerability Catalog

An out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

An incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

A type confusion in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

A use after free in the Windows Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Use after free vulnerability in Windows Kerberos. An authorized attacker can exploit it to elevate privileges locally.

Heap-based buffer overflow in the Windows Storage Spaces Controller driver. An authorized attacker can exploit it to elevate privileges locally.

Use after free vulnerability in the Windows Ancillary Function Driver for WinSock. An authorized attacker can elevate privileges locally.

Use after free vulnerability in the Windows Win32 Kernel Subsystem. An authorized attacker can exploit it to elevate privileges locally.

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in the Windows Common Log File System Driver. An authorized attacker can elevate privileges locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

Use after free vulnerability in the Windows Audio Service. An authorized attacker can exploit it to elevate privileges locally.

Incorrect authorization in Active Directory Domain Services. An unauthorized attacker can execute code over a network.

Out-of-bounds read in the Desktop Window Manager component. An authorized attacker can elevate privileges locally.

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

Type confusion (access of resource using incompatible type) in the Windows Ancillary Function Driver for WinSock. An authorized attacker can elevate privileges locally.

Use after free vulnerability in the Windows Console Driver. An authorized attacker can exploit it to elevate privileges locally.