QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address.

Windows dnsrslvr.dll Elevation of Privilege Vulnerability

Microsoft Word Information Disclosure Vulnerability

Microsoft Access Remote Code Execution Vulnerability

Microsoft Office Click-to-Run Elevation of Privilege Vulnerability

Microsoft Office SharePoint XSS Vulnerability

Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

DirectWrite Information Disclosure Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Office SharePoint XSS Vulnerability

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Microsoft Office SharePoint XSS Vulnerability

Windows Setup Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

GRUB2 contained integer overflows when handling the initrd command leading to a heap-based buffer overflow.

GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.

GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim