Microsoft ≫ Windows 11 23h2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.