Autor: Peter Leibling

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Improper neutralization of special elements used in a command (‚command injection‘) in SQL Server allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.

Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.

Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.