Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.

An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS. This issue affects Easy Appointments: from n/a through 4.0.2.1.

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.

Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.

None

Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.

Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.