Autor: Peter Leibling

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in .NET Framework allows an unauthorized attacker to deny service over a network.

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Access of resource using incompatible type (‚type confusion‘) in Windows COM allows an authorized attacker to disclose information locally.

Improper link resolution before file access (‚link following‘) in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Loop with unreachable exit condition (‚infinite loop‘) in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in .NET Framework allows an unauthorized attacker to deny service over a network.

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.