Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.