The internet is broken right now.

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.

Memory safety OS & kernel

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Memory safety OS & kernel

Double free in Windows DNS allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

Memory safety OS & kernel

Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over an adjacent network.

Memory safety OS & kernel

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Memory safety Server

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

Memory safety OS & kernel

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Memory safety OS & kernel

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Memory safety Server

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Memory safety Server

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Memory safety Server

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Memory safety Server

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.

Memory safety OS & kernel

Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.

Memory safety OS & kernel

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Memory safety Server

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Memory safety Server

Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.

Memory safety

Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.

Memory safety Server

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Memory safety Server

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Memory safety Server

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Memory safety Server

Heap-based Buffer Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver.

Memory safety OS & kernel

Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel.

Memory safety OS & kernel

EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise SMM handler integrity, cause system instability, and lead to denial of service. It could also impact Integrity and Availability.

Memory safety

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, a forge.tls client can pass a handshake record to tls.handleHandshake() while the connection has no session, including after a close_notify alert, after the application calls close(), or before handshake() is called. The handler dereferences c.session.md5 before dispatching the message, causing a TypeError to propagate from connection.process(). A malicious server or on-path attacker can deliver the record, including after a reset when the connection uses no encryption, and terminate a Node.js process if the application does not catch the exception. forge.tls servers are not affected, and there is no confidentiality or integrity impact. This issue is fixed in version 1.4.3.

Memory safety Server

Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

Memory safety OS & kernel

Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network.

Memory safety OS & kernel