Microsoft Security Center Center News

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.