CVE Vulnerability Catalog

Use-after-free vulnerability in Windows NTFS. An authorized attacker can elevate privileges locally.

An out-of-bounds read vulnerability in the Windows kernel allows an authorized attacker to elevate privileges locally. This flaw can be exploited to gain higher-level access on the affected system.

Race condition vulnerability in Windows Telephony Service. An authorized attacker can elevate privileges locally.

A race condition in Windows NTFS due to improper synchronization of shared resources allows an authenticated attacker to elevate privileges locally.

Windows Remote Access Connection Manager has a use-after-free vulnerability that allows an authorized attacker to elevate privileges over a network.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

A Time-of-check time-of-use (TOCTOU) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Windows Media contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.

An infinite loop in Active Directory Federation Services (AD FS) allows an unauthorized attacker to remotely cause a denial of service (DoS).

Improper restriction of names for files and other resources in GitHub Copilot allows an unauthorized attacker to execute code locally.

The Windows Wireless Wide Area Network Service has a deserialization of untrusted data vulnerability that allows an authorized attacker to elevate privileges locally.

A use-after-free vulnerability in Windows Message Queuing allows an authorized attacker to execute code remotely.

A race condition due to improper synchronization of shared resources in Windows Runtime allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.

In Windows Resilient File System (ReFS), a stack-based buffer overflow vulnerability allows an unauthorized attacker to execute code locally.

A Use-After-Free vulnerability in Windows Netlogon allows an authorized attacker to remotely elevate privileges over a network. The issue stems from improper memory management during authentication request processing.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability.

An out-of-bounds read vulnerability in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.