Microsoft

Uncontrolled resource consumption in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to deny service over a network.

Time-of-check time-of-use (toctou) race condition in Windows Container Manager Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Improper access control in Windows NTFS allows an authorized attacker to perform tampering locally.

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally.

Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over an adjacent network.

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.