Microsoft Security Center Center News

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.