Microsoft ≫ Windows Server 2016

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.