A use after free vulnerability exists in curl <7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.

Windows Kerberos Remote Code Execution Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

Internet Explorer Memory Corruption Vulnerability

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.

Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.

Internet Explorer Remote Code Execution Vulnerability

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation.

Windows Kerberos Elevation of Privilege Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows iSCSI Service Denial of Service Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Windows Active Directory Domain Services API Denial of Service Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

Windows iSCSI Discovery Service Denial of Service Vulnerability