Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

Windows TCP/IP Driver Denial of Service Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability

Windows Media Video Decoder Remote Code Execution Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

Windows NTFS Denial of Service Vulnerability

Windows Application Compatibility Cache Denial of Service Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.

BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.

A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.

An unlimited recursion in DxeCore in EDK II.

An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink it incorrectly also creates the target of the symlink as an empty file which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists then the contents of that file correctly remain unchanged.)