Microsoft Security Center Center News

Untrusted pointer dereference in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.

Buffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate privileges over a network.

Use after free in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network.

Improper access control in Windows HTTP.sys allows an unauthorized attacker to disclose information over a network.

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Active Directory allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.

Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Uncontrolled resource consumption in Windows Hyper-V allows an authorized attacker to deny service locally.

Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

Use of uninitialized resource in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.

Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.