Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Windows AD FS Security Feature Bypass Vulnerability

Windows Installer Spoofing Vulnerability

Rich Text Edit Control Information Disclosure Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Accessibility Insights for Android Information Disclosure Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft MSHTML Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Windows Media Center Elevation of Privilege Vulnerability

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

mod_proxy SSRF

A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.