Microsoft

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.

Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.