Microsoft ≫ Windows 10 1507

Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally.

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network.

Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.