Vulnerabilidades

Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Improper input validation in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.

Un uso después de liberar (use-after-free) en Windows Bluetooth Service permite a un atacante autorizado elevar privilegios localmente.

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally.

No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.

La ejecución simultánea utilizando un recurso compartido con sincronización incorrecta ('race condition') en Windows Storage permite que un atacante no autorizado ejecute código a través de una red.

La desreferencia de puntero no confiable en el controlador de transporte MBT de Windows permite que un atacante autorizado eleve privilegios localmente.

La verificación incorrecta de la firma criptográfica en los certificados de Windows permite que un atacante no autorizado realice suplantación de identidad a través de una red.

La falta de autenticación para una función crítica en la API de Windows StateRepository permite que un atacante autorizado eleve privilegios localmente.

Path traversal relativo en Windows Kerberos permite a un atacante autorizado elevar privilegios en una red.

La autenticación incorrecta en Windows NTLM permite que un atacante autorizado eleve privilegios en una red.

El desbordamiento del búfer basado en montón en Windows GDI+ permite que un atacante no autorizado ejecute código a través de una red.

El acceso a un recurso mediante un tipo incompatible ('confusión de tipos') en las notificaciones push de Windows permite que un atacante autorizado eleve privilegios localmente.