Microsoft ≫ Windows 11 26h1

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.