CVE Database

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.

Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.

Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Weak authentication in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

Untrusted search path in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Improper verification of cryptographic signature in JDBC Driver for SQL Server allows an unauthorized attacker to bypass a security feature over a network.

Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.

Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.

Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.

Heap-based Buffer Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or …

Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or …

Untrusted search path in the cross-user process launcher in Open Job Description (OpenJD) Sessions for Python before 0.11.0, as used in the AWS Deadline Cloud …

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, pki.verifyCertificateChain() in lib/x509.js does not decode or enforce …

HarnessRouter is a self-hosted unified API for agent harnesses. From version 0.4.2 until 0.31.7, routes that accept a session ID or response ID validate only …

pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query endpoint uses FetchDocuments in …

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network.

Use after free in Windows Function Discovery Resource Publication allows an unauthorized attacker to execute code over an adjacent network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authorized attacker to execute code over a network.

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

Improper control of generation of code ('code injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.

Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.