Microsoft Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.
NVD data is used under its public data terms. This service is not endorsed or certified by NVD.Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
The CVSS severity warrants an early asset and exposure review.Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
The CVSS severity warrants an early asset and exposure review.Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.
The CVSS severity warrants an early asset and exposure review.Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network.
The CVSS severity warrants an early asset and exposure review.Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
The CVSS severity warrants an early asset and exposure review.Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.
The CVSS severity warrants an early asset and exposure review.Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.