Microsoft Security Center Center News

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.