Autor: Peter Leibling

Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.

Improper neutralization of input during web page generation (‚cross-site scripting‘) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.