Microsoft

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security fea

Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth RFCOM P

Use after free in RPC Runtime allows an authorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Compon

Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally.

Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacke

Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose informati

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose inform

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally

Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoof

Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a

A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase

Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Prot

Sensitive information disclosure due to improper configuration of a headless browser. The following products are affecte

Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyb

Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Prot

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec

Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acr

Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cy

Denial of service due to insufficient input validation in authentication logging. The following products are affected: A

Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Pro

Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acron

Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cybe

Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: A

Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cy

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are a

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber

Payment Orchestrator Service Elevation of Privilege Vulnerability

'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

Microsoft Devices Pricing Program Remote Code Execution Vulnerability

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-cl

Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, An

Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client R