Visual Studio Code Spoofing Vulnerability

Visual Studio Code WSL Extension Remote Code Execution Vulnerability

Microsoft Office app Remote Code Execution Vulnerability

Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability

Microsoft PowerShell Spoofing Vulnerability

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Microsoft BizTalk ESB Toolkit Spoofing Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Windows AppX Installer Spoofing Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Information Disclosure Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Windows Mobile Device Management Elevation of Privilege Vulnerability

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft Office Graphics Remote Code Execution Vulnerability

HTML Cleaner allows crafted and SVG embedded scripts to pass through

Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration

Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreSQL server using 'trust' authentication with a 'clientcert' requirement or to use 'cert' authentication a man-in-the-middle attacker can inject false responses to the client's first few queries. Despite the use of SSL certificate verification and encryption Odyssey will pass these results to client as if they originated from valid server. This is similar to CVE-2021-23222 for PostgreSQL.