Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

ColdFusion is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.