Microsoft ≫ Windows Server 2016

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally.

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.

Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.