CVE Vulnerability Catalog

An out-of-bounds read vulnerability in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

An improper authorization vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

A buffer over-read vulnerability in Windows Subsystem for Linux (WSL) allows an authorized attacker to elevate privileges locally.

A type confusion vulnerability in .NET Core allows an unauthorized attacker to cause a denial of service over a network.

A vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network by including functionality from an untrusted control sphere.

An XSS vulnerability in Visual Studio Code allows an unauthorized attacker to locally bypass a security feature due to improper input neutralization during web page generation.

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow vulnerability in Windows Media Foundation. An unauthorized attacker can remotely execute code.

A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow vulnerability in Windows Media Foundation. An unauthorized attacker can remotely execute code.

Use-after-free vulnerability in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.

Improper access control in the Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.

A time-of-check time-of-use (TOCTOU) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.