Vulnerabilidades

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Un uso después de liberar (use-after-free) en Windows Cloud Files Mini Filter Driver permite a un atacante autorizado elevar privilegios localmente.

Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

Exposición de información sensible a un actor no autorizado en la Herramienta de Recortes de Windows permite a un atacante no autorizado realizar suplantación a través de una red.

Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en Windows TCP/IP permite a un atacante no autorizado ejecutar código a través de una red.

Ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') en Windows Win32K - GRFX permite a un atacante autorizado elevar privilegios localmente.

Uso después de liberar en el Controlador de función auxiliar de Windows para WinSock permite a un atacante autorizado elevar privilegios localmente.

Uso después de liberar en el controlador de función auxiliar de Windows para WinSock permite a un atacante autorizado elevar privilegios localmente.

Uso después de liberar en el Controlador de filtro del sistema de archivos de Aislamiento de Contenedores de Windows permite a un atacante autorizado elevar privilegios localmente.

Fallo del mecanismo de protección en Windows Shell permite a un atacante no autorizado eludir una característica de seguridad a través de una red.

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.

Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.

Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.