Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service.

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.