| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. |
| Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally. |
| Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally. |
| Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network. |
| Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| yshopmall <=3.3 is vulnerable to Cross Site Scripting (XSS). The file upload endpoint /api/upload of the system lacks file type validation. Attackers can upload files of any type, including HTML, JSP, and other executable files. |
| Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. |
| Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
| Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network. |
| Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network. |
| Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally. |
| Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
| Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
| Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally. |
