Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. CVSSv3.1 7.8 (HIGH)
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.1 (HIGH)
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network. CVSSv3.1 8.0 (HIGH)
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network. CVSSv3.1 9.9 (CRITICAL)
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. CVSSv3.1 8.2 (HIGH)
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. CVSSv3.1 7.8 (HIGH)
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user. CVSSv3.1 8.4 (HIGH)
The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information. CVSSv3.1 8.4 (HIGH)
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. CVSSv3.1 8.2 (HIGH)
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. CVSSv3.1 8.2 (HIGH)
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. CVSSv3.1 9.6 (CRITICAL)
Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. CVSSv3.1 8.2 (HIGH)
Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. CVSSv3.1 8.2 (HIGH)
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. CVSSv3.1 8.2 (HIGH)
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally. CVSSv3.1 8.6 (HIGH)
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)