Microsoft Security Center Center News

Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.

Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Use after free in DNS Server allows an authorized attacker to elevate privileges locally.