Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.

Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper's client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.