Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally.

A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607). Affected applications do not properly encode user-supplied input reflected into HTML attribute contexts within the authentication redirect flow (/auth/ endpoint). This could allow an unauthenticated remote attacker to inject arbitrary JavaScript into the browser of an authenticated user who loads a crafted URL, enabling the attacker to perform actions within the victim's Teamcenter session.