Txz

A heap-based buffer overflow exists in Microsoft SQL Server, which allows an authorized attacker to execute arbitrary code over a network. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting memory and allowing for code execution.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

An authorized attacker can locally disclose information due to improper link resolution before file access, a condition known as link following, within the Windows AppX Deployment Service.

Improper protection of an alternate path in the Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

External control of system or configuration settings allows an authorized attacker to elevate privileges locally.

A time-of-check time-of-use (toctou) race condition exists in Windows Setup Files Cleanup. This occurs when a program checks the state of a resource before using it, but the state changes between the check and the use. An authorized attacker can exploit this to elevate privileges locally.

An untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally, which can lead to a full system compromise.

An untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

A time-of-check time-of-use (toctou) race condition exists in Windows Setup Files Cleanup. This occurs when a program checks the state of a resource before using it, but the state changes between the check and the use. An authorized attacker can exploit this to elevate privileges locally.

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute arbitrary code over a network, which can affect the system.

Improper access control in WebDAV allows an authorized attacker to disclose sensitive information over a network, which can subsequently affect the system.

A heap-based buffer overflow allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A heap-based buffer overflow exists in Windows Update, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges through a physical attack. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated memory block than it can hold.

A heap-based buffer overflow occurs in the Windows Volume Manager Extension Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

A heap-based buffer overflow occurs in the Windows Partition Management Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

An out-of-bounds read in the Windows Event Logging Service allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the system. This issue is caused by a heap-based buffer overflow within the event logging service.

Improper link resolution before file access, also known as link following, allows an authorized attacker to disclose information locally.

An integer overflow or wraparound exists in the Windows Graphics Component. This issue allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. The flaw can be triggered using a specially crafted file.

An integer overflow or wraparound in the Windows Win32K - GRFX component allows an unauthorized attacker to execute code locally. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is too large to be represented within the available storage space.