Where
AND
-Infinity
0
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Race Condition
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

1 / 3
Source: Microsoft
First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.5
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Active Directory Domain Services Elevation of Privilege Vulnerability

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7
Race Condition
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
8.1
Double Free
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
8.1
Double Free
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
5.9
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

HTTP.sys Information Disclosure Vulnerability

1 / 2
Source: Microsoft
First published (updated )
Severity
7.5
Buffer Overflow
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
6.5
Integer Overflow
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
8.8
Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
6.8
Integer Underflow
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

1 / 2
Source: Microsoft
First published (updated )
Severity
6.8
Use After Free
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

1 / 2
Source: Microsoft
First published (updated )
Severity
6.7
AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper restriction of communication channel to intended endpoints in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
6.7
Double Free
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
5.9
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Path Traversal
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
6.8
Buffer Overflow
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

1 / 2
Source: Microsoft
First published (updated )
Severity
7
Buffer Overflow
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows USB Scanner Driver allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7
Use After Free
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7
Buffer Overflow
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Stack-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.5
Use After Free, Buffer Overflow
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
6.8
Buffer Overflow
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper authorization in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Incorrect authorization in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
7
Double Free
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Double free in Windows Installer allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203