Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. CVSSv3.1 9.8 (CRITICAL)
Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network. CVSSv3.1 8.0 (HIGH)
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. CVSSv3.1 8.8 (HIGH)
Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 8.1 (HIGH)
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. CVSSv3.1 8.8 (HIGH)
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 8.1 (HIGH)
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. CVSSv3.1 9.8 (CRITICAL)
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.1 (HIGH)
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. CVSSv3.1 8.8 (HIGH)
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network. CVSSv3.1 8.2 (HIGH)
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. CVSSv3.1 8.8 (HIGH)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. CVSSv3.1 8.8 (HIGH)
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. CVSSv3.1 9.6 (CRITICAL)
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. CVSSv3.1 8.8 (HIGH)
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network. CVSSv3.1 8.0 (HIGH)
Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.5 (HIGH)
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the server:log listener (Symfony\Bridge\Monolog\Command\ServerLogCommand) binds to 0.0.0.0:9911 by default and processes each received frame with unserialize(base64_decode($message)) without authentication, integrity checks, or an allowed_classes allowlist, allowing any reachable host to submit attacker-chosen serialized PHP payloads t CVSSv3.1 8.6 (HIGH)
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.1.0 until 7.4.12 and 8.0.12, Cas2Handler builds the CAS service parameter from Request::getSchemeAndHttpHost(), which reflects an attacker-controlled Host header when framework.trusted_hosts is not configured; an attacker controlling another application registered with the same CAS server can replay a victim ticket against the Symfony application and authenticate as the vi CVSSv3.1 8.1 (HIGH)