Microsoft

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey".

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.

Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.