Media Foundation Memory Corruption Vulnerability

hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configuration space.

Windows Registry Elevation of Privilege Vulnerability

Windows Registry Elevation of Privilege Vulnerability

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2 and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation the TLS server always uses wrong data in place of an encryption key derived from an application.

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

Windows Elevation of Privilege Vulnerability

Windows COM Server Elevation of Privilege Vulnerability

hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation.

Remote Desktop Client Remote Code Execution Vulnerability

Windows Network Connections Service Elevation of Privilege Vulnerability

Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability

Windows Event Logging Service Elevation of Privilege Vulnerability

Windows Runtime Elevation of Privilege Vulnerability

Windows WalletService Elevation of Privilege Vulnerability

Windows Credential Enrollment Manager Service Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Print Workflow Service Elevation of Privilege Vulnerability

Windows Event Logging Service Elevation of Privilege Vulnerability

address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.