| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
| Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. |
| Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. |
| Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally. |
| Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network. |
| Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. |
| Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network. |
| Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network. |
| Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. |
| Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. |
| Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. |
| Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. |
| Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. |
| Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network. |
| Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. |
| Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. |
| Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally. |
