Microsoft ≫ Windows Server 2012

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.