Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows Digital Media Receiver Elevation of Privilege Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

NTFS Set Short Name Elevation of Privilege Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Storage Spaces Controller Information Disclosure Vulnerability

Windows Fax Service Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Event Tracing Remote Code Execution Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

SymCrypt Denial of Service Vulnerability

Storage Spaces Controller Information Disclosure Vulnerability

Windows Common Log File System Driver Information Disclosure Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

DirectX Graphics Kernel File Denial of Service Vulnerability

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution

Windows Common Log File System Driver Elevation of Privilege Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the tcpip.sys driver. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

Windows Print Spooler Elevation of Privilege Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Remote Access Connection Manager service. By creating a directory junction, an attacker can abuse the service to create a directory. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional user interaction is required in that an administrator must begin a version update of Windows. The specific flaw exists within Windows Update Assistant. By creating a directory junction, an attacker can abuse Windows Update Assistant to change the DACL on an arbitrary file. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM.

Windows Hello Security Feature Bypass Vulnerability