Microsoft ≫ Windows Server

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.

Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.