Microsoft Security Center Center News

Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.

Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.

Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.

Improper access control in .NET allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.

Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

Improper restriction of rendered ui layers or frames in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.

Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.

Missing release of memory after effective lifetime in Windows Layer-2 Bridge Network Driver allows an unauthorized attacker to deny service over an adjacent network.