Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.

Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network.

Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.