Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Summary Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Details

New network path creations and removals triggered by incoming packets can lead to a pointer invalidation.

Patches

- Guard path promotion e0f55b5

Impact

An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.