4 exploits320
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This issue affects WordPress: from n/a through 7.1.
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.