🛡️ CVE Intelligence Center

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an a…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally.

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privil…

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally…

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate priv…

Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally.

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized att…

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.