A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.

Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation.

Windows Kerberos Elevation of Privilege Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows iSCSI Service Denial of Service Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Windows Active Directory Domain Services API Denial of Service Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

.NET Framework Denial of Service Vulnerability

Windows iSCSI Discovery Service Denial of Service Vulnerability

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

Windows iSCSI Service Denial of Service Vulnerability

Windows Fax Service Remote Code Execution Vulnerability