CVE Vulnerability Catalog

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. Exploitation requires local access to the system.

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally. Exploitation requires local access and privileges.

Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

A type confusion vulnerability in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. An attacker could leverage this vulnerability to leak data.

Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. An attacker may access data they should not be permitted to see.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. An attacker may inject a malicious script into a page.

Improper control of code generation (code injection) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.