CVE index

Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.0, FreeSWITCH's bundled XML parser expands nested <!ENTITY> declarations without a depth or count bound, so a small DTD can describe a body that expands exponentially ("billion laughs"). The PIDF body of a SIP PUBLISH is fed to this parser before any digest check, letting an unauthenticated network attacker force unbounded CPU and memory consumption with a single request. This issue has be...