CVE Vulnerability Catalog

An integer underflow vulnerability in the Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.

A heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code remotely over a network.

Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

Use after free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.

In Microsoft Windows Speech, a use-after-free vulnerability allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

Use-After-Free vulnerability in DNS Server allows an authorized attacker to execute code remotely over the network. The issue stems from improper memory management when processing specially crafted DNS queries.

Use after free vulnerability in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.

Microsoft Windows App Store has a use of uninitialized resource vulnerability that allows an authorized attacker to disclose information locally.

A heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

A use-after-free vulnerability exists in the Microsoft Brokering File System. This allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.

A race condition vulnerability was found in Windows App Installer due to improper synchronization of shared resources. This flaw allows an authorized attacker to elevate privileges locally.

Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.

A vulnerability in SQL Server due to improper neutralization of special elements in SQL commands (SQL injection) allows an authorized attacker to elevate privileges over a network.

A vulnerability in ASP.NET Core allows an unauthorized attacker to perform a Denial of Service (DoS) attack by allocating resources without limits or throttling. The attack can be carried out remotely over a network.

A race condition in Windows Push Notifications allows an authorized attacker to elevate privileges locally.