Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.

Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.