CVE Vulnerability Catalog

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

The Microsoft NAT Helper component (ipnathlp.dll) contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

Use-After-Free vulnerability in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

A race condition exists in Windows SMB during concurrent execution using a shared resource. An authenticated attacker can elevate privileges over the network.

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.

An out-of-bounds read vulnerability in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

An improper authorization vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

A buffer over-read vulnerability in Windows Subsystem for Linux (WSL) allows an authorized attacker to elevate privileges locally.

A type confusion vulnerability in .NET Core allows an unauthorized attacker to cause a denial of service over a network.

A vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network by including functionality from an untrusted control sphere.

An XSS vulnerability in Visual Studio Code allows an unauthorized attacker to locally bypass a security feature due to improper input neutralization during web page generation.

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow vulnerability in Windows Media Foundation. An unauthorized attacker can remotely execute code.

A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow vulnerability in Windows Media Foundation. An unauthorized attacker can remotely execute code.

Use-after-free vulnerability in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.