Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain (via a reflected XSS) that leverages the browser's internal JavaScript bridge to register a deferred callback, navigate the tab to a victim site, and then execute attacker-controlled code on that site when a login dialog is dismissed.

In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required.

Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.