Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.