Microsoft ≫ Windows Server 2008

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network.

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny service over a network.

Null pointer dereference in Windows Local Security Authority (LSA) allows an authorized attacker to deny service over a network.

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.