Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.