Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability

Push message Routing Service Elevation of Privilege Vulnerability

Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr

OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking

Pre-auth SSH DoS via unbounded zlib inflate

SFTP root escape via component-agnostic prefix check in ssh_sftpd

Request smuggling via first-wins Content-Length parsing in inets httpd

Apache HTTP Server: http2: double free and possible RCE on early reset

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.

Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

libusb < 1.0.30 NULL Pointer Dereference in parse_interface()

MapUrlToZone Security Feature Bypass Vulnerability

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

RPC Runtime Library Remote Code Execution Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Broadcast DVR Elevation of Privilege Vulnerability