Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network.

Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.

Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally.

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally.

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.