Microsoft Security Center Center News

Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network.

Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.

Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network.

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application. The security update addresses the vulnerability by correcting the way that WER handles and executes files.

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.