Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows server 2019microsoft windows server 2022
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2