Microsoft Windows Kernel Privilege Escalation Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
Microsoft Windows Hyper-V Privilege Escalation Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
PHP-CGI OS Command Injection Vulnerability
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP…
Microsoft DWM Core Library Privilege Escalation Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
Windows MSHTML Platform Security Feature Bypass Vulnerability
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
SmartScreen Prompt Security Feature Bypass Vulnerability
Microsoft .NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability
Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
Internet Shortcut Files Security Feature Bypass Vulnerability
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Microsoft Windows Out-of-Bounds Read Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
Microsoft WordPad Information Disclosure Vulnerability
HTTP/2 Rapid Reset Attack Vulnerability
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability
Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Microsoft Streaming Service Proxy Privilege Escalation Vulnerability
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
Microsoft Windows Search Remote Code Execution Vulnerability
Windows Search Remote Code Execution Vulnerability
Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
Windows MSHTML Platform Elevation of Privilege Vulnerability
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
Microsoft Streaming Service Elevation of Privilege Vulnerability
Microsoft Win32K Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability