Feed aggregator

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.

Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally.

Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.

Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network.

Missing authorization in Visual Studio Code allows an unauthorized attacker to disclose information over a network.