Vulnerabilidades

Ejecución concurrente mediante un recurso compartido con sincronización incorrecta ('condición de carrera') en Windows USB Driver permite a un atacante autorizado elevar privilegios localmente.

Desbordamiento de búfer basado en montón (heap) en Windows NTFS permite a un atacante no autorizado ejecutar código localmente.

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Desbordamiento de búfer basado en montón (heap) en Windows NTFS permite a un atacante autorizado ejecutar código localmente.

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.

Desbordamiento de búfer basado en montón (heap) en Windows NTFS permite a un atacante autorizado ejecutar código localmente.

Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.

Desbordamiento de búfer basado en montón (heap) en Virtual Hard Disk (VHD) Miniport Driver permite a un atacante autorizado elevar privilegios localmente.

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

Desreferencia de puntero nulo en Active Directory Domain Services permite a un atacante autorizado provocar una denegación de servicio a través de una red.

Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

Un uso después de liberar (use-after-free) en Reliable Multicast Transport Driver (RMCAST) permite a un atacante no autorizado ejecutar código a través de una red.

Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.