Azure DevOps Server Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.
Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.
Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
Use after free in HID class driver allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally.