| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.
To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
The update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory. |
| Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network. |
| Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| Double free in Winsock allows an authorized attacker to elevate privileges locally. |
| Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. |
| Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a network. |
| Use after free in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
| Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
| Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. |
| No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network. |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally. |
| Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network. |
| Improper certificate validation in Windows Active Directory Certificate Services allows an authorized attacker to bypass a security feature over a network. |
| Heap-based buffer overflow in Windows OLE DB allows an authorized attacker to elevate privileges locally. |
