Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
AMD Zen Information Disclosure Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
Remote Desktop Gateway Service Remote Code Execution Vulnerability
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Microsoft Windows Codecs Library Denial of Service Vulnerability
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.