| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting how the Windows CNG Key Isolation Service handles memory. |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| Double free in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. |
| An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.
A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation. |
| Double free in Winsock allows an authorized attacker to elevate privileges locally. |
| Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| Double free in Windows Event Collector Service allows an authorized attacker to elevate privileges locally. |
| Double free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. |
| Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. |
| Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. |
| Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
| Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
| Double free in Windows DNS allows an unauthorized attacker to execute code over a network. |
| Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
| A double free vulnerability in NPU driver due to improper pointer management (940) |
| A double free vulnerability in NPU driver due to improper pointer management (941) |
| libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSH_FXP_OPEN with SSH_FXP_STATUS containing FX_OK, the response data buffer is freed, and if a subsequent sftp_packet_require() call returns a specific error such as LIBSSH2_ERROR_CHANNEL_PACKET_EXCEEDED, the same pointer is freed a second time, enabling tcache dup conditions on glibc systems that allow overlapping allocations and function pointer overwrites. |
