Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1062, and CVE-2016-1117.

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics Component RCE Vulnerability."

Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated to potentially enable escalation of privileges via local access.

Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny service over a network.

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

Improper access control in Azure allows an unauthorized attacker to disclose information over a network.

Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Storage Port Driver allows an authorized attacker to disclose information locally.

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.

Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may allow a privileged user to potentially enable escalation of privilege via local access.

Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1. Required Configuration: Only environments with Windows as the underlying operating system is affected by this issue

Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.

Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access.

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3125, and CVE-2015-5116.

Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally.

Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools before version iDmiEdit-Linux-5.27.06.0017 may allow a privileged user to potentially enable escalation of privilege via local access.

Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access.

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Azure DevOps Server Elevation of Privilege Vulnerability

Active Directory Domain Services Information Disclosure Vulnerability

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability

An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you.

Windows Kernel Information Disclosure Vulnerability

Windows Group Policy Security Feature Bypass Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.

Secure Boot Security Feature Bypass Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Geolocation Service Information Disclosure Vulnerability

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows Recovery Environment Agent Elevation of Privilege Vulnerability