CVE Database

Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in HID class driver allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code locally.

Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.

Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.

Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.

Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally.

Use after free in DNS Server allows an authorized attacker to deny service over a network.

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally.

Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.