Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: Move setting of netops to fix crash icssm_prueth_netdev_init() calls of_phy_get_and_connect() before ndev->netdev_ops is assigned. phy_attach_direct() -> phy_link_topo_add_phy() reads dev->netdev_ops through netdev_need_ops_lock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIG_NET_SHAPER is enabled. Assign netdev_ops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.