CVE Database

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.

Double free in Windows DNS allows an unauthorized attacker to execute code over a network.

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.

Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.

Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over an adjacent network.

Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.

Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.

Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.

Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Weak authentication in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

Untrusted search path in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Improper verification of cryptographic signature in JDBC Driver for SQL Server allows an unauthorized attacker to bypass a security feature over a network.

Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.

Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.