Microsoft ≫ Windows Server 2016

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally.

Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.

Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.