Microsoft Security Center Center News

Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.

Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.