Autor: Peter Leibling

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack.

Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally.

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.