Summary Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Details

New network path creations and removals triggered by incoming packets can lead to a pointer invalidation.

Patches

- Guard path promotion e0f55b5

Impact

An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.

Remote Desktop Protocol Remote Code Execution Vulnerability

Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

.NET Security Feature Bypass Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

DHCP Client Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.

No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.

HTTP.sys Remote Code Execution Vulnerability

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.