Vulnerability feed

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.