Microsoft Security Center Center News

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.

Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.

Untrusted search path in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network.

Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.