Microsoft ≫ Windows Server 2016

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.