Autor: Peter Leibling

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Improper neutralization of input during web page generation (‚cross-site scripting‘) in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Improper neutralization of special elements used in an sql command (’sql injection‘) in SQL Server allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.