Microsoft Security Center Center News

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code locally.

Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.

Use after free in HID class driver allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.