Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. CVSSv3.1 9.8 (CRITICAL)
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.1 (HIGH)
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Use after free in DNS Server allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.1 (HIGH)
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. CVSSv3.1 8.4 (HIGH)
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. CVSSv3.1 9.8 (CRITICAL)
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed. CVSSv3.1 8.2 (HIGH)
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network. CVSSv3.1 9.8 (CRITICAL)
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)