Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network. CVSSv3.1 8.8 (HIGH)
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. CVSSv3.1 8.8 (HIGH)
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.1 (HIGH)
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine CVSSv3.1 8.1 (HIGH)
Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. CVSSv3.1 8.8 (HIGH)
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVSSv3.1 9.8 (CRITICAL)
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.1 (HIGH)
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.1 (HIGH)
Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 8.1 (HIGH)
Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network. CVSSv3.1 9.8 (CRITICAL)
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. CVSSv3.1 8.0 (HIGH)
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. CVSSv3.1 8.3 (HIGH)