A use-after-free flaw (CWE-416) in the Remote Desktop Client of Windows allows code execution over the network. Microsoft's CNA record rates it High (CVSS 7.5) with full impact on confidentiality, integrity and availability. Exploitation requires a user to interact with an attacker-controlled RDP endpoint and a high-complexity attack, and no in-the-wild exploitation is known.
Microsoft · Remote Desktop Client
A use-after-free flaw (CWE-416) in the Microsoft Remote Desktop Client, the RDP client component of Windows, allows an unauthorized attacker to execute code over the network. Exploitation requires high attack complexity and user interaction, for example a user connecting to or being directed to a malicious RDP endpoint. The CVSS 3.1 base score is 7.5 (High). The affected and fixed build lists should be verified on the MSRC advisory before patch decisions are made.
Microsoft · Remote Desktop Client
A heap-based buffer overflow in the libarchive component of Windows allows an unauthenticated remote attacker to execute code. The attack requires that a user interacts with the flaw (UI:R in the CVSS vector), for example by opening a crafted archive. Whether a Windows network service parses archives automatically is unknown.
Microsoft · Windows libarchive
A use-after-free flaw (CWE-416) in the Windows Remote Desktop Client allows an unauthorized attacker to execute code over the network. The attack requires high complexity and user interaction, for example a user connecting to a host controlled by the attacker. The CVSS 3.1 base score is 7.5 and no exploitation is known.
Microsoft · Remote Desktop Client
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A use-after-free vulnerability (CWE-416) in the Quality Windows Audio/Video Experience (QWAVE) service of Windows allows an authorized local user to elevate privileges. An attacker needs a foothold as a low-privileged user, for example through phishing or malware, and attack complexity is high. The flaw is not directly internet-facing, and CISA SSVC lists exploitation as none and not automatable.
Microsoft · Windows
A use-after-free flaw (CWE-416) in the Remote Desktop Client of Windows allows remote code execution. Affected are Windows 10, Windows 11 and Windows Server 2012, 2012 R2 and 2016 with builds below the fixed versions. Microsoft rates the attack complexity as high and requires user interaction, so an attacker would most likely need a user to connect to a hostile or compromised RDP endpoint. Microsoft's CVSS score is 7.5 (High).
Microsoft · Windows Remote Desktop Client
Research and translation in progress – available shortly.
Windows libarchive, the archive handling library built into several Windows 10, 11 and Server versions, contains a path traversal flaw (CWE-22). A remote attacker can tamper with files outside the intended directory. The attack needs no authentication, but a user must act, for example by opening or extracting a crafted archive (UI:R). The CVSS 3.1 base score is 6.5 (Medium), and no exploitation in the wild is known.
Microsoft · Windows
Research and translation in progress – available shortly.
Microsoft Windows 10 Version 1607 and Windows Server 2016 contain a heap-based buffer overflow in the Kernel Streaming Service driver, which Microsoft's advisory titles 'Kernel Streaming Service Driver Elevation of Privilege Vulnerability'. An authenticated local user or code already running on the host can exploit it to gain higher privileges, including SYSTEM-level control. The attack vector is local only, so remote exploitation over the network is not possible.
Microsoft · Windows 10 1607
Research and translation in progress – available shortly.
A relative path traversal vulnerability in the Windows build of libarchive, which is used by the built-in tar.exe utility, allows an unauthenticated attacker to tamper with files over the network. Exploitation requires user interaction, for example opening or extracting a crafted archive. The impact is limited to integrity (CVSS 3.1: 6.5, medium).
Microsoft · Windows
Research and translation in progress – available shortly.
A local elevation of privilege vulnerability in the Kernel Streaming Service driver of Windows 10 Version 1607 is caused by an integer overflow or wraparound (CWE-190). An attacker with a low-privileged local account can use it to gain SYSTEM rights, which would give full control over the affected host. The attacker must already be logged on locally, so the vulnerability is not directly reachable from the internet.
Microsoft · Windows 10 1607
A use-after-free vulnerability (CWE-416) in the Windows Kernel Streaming Service driver allows an authorized local attacker to elevate privileges. According to Microsoft, a successful attacker could gain SYSTEM privileges. The attacker needs an existing local foothold and low privileges, and exploitation is rated as highly complex; the flaw is not remotely exploitable.
Microsoft · Windows
A heap-based buffer overflow in the Windows Kernel Streaming Service Driver allows an authorized, locally logged-in attacker to elevate privileges. The attacker needs a low-privileged account and local access, and no user interaction is required. Microsoft rates the flaw Important, and at the time of retrieval Microsoft reported no exploitation.
Microsoft · Windows
An out-of-bounds read in the Windows Overlay Filter component affects Windows 10 Version 1607. The same build underlies Windows Server 2016, which is also listed as affected. An attacker with local access and a low-privilege account can exploit the flaw without user interaction, and the CVSS vector rates the impact on confidentiality, integrity and availability as high. The flaw is not directly reachable from the internet.
Microsoft · Windows 10 Version 1607
Windows Overlay Filter in several Windows 10, Windows 11 and Windows Server versions contains a heap-based buffer overflow (CWE-122). The CNA title calls it a Remote Code Execution vulnerability, but the description and the CVSS vector (AV:P) require physical access to the device. An attacker with physical access could execute code with high impact on confidentiality, integrity and availability. CISA SSVC rates exploitation as none and automatable as no.
Microsoft · Windows 10
Microsoft Windows contains an integer overflow or wraparound in the Windows Overlay Filter component. An authorized local attacker with low privileges can exploit it to elevate privileges, which may lead to full control of the affected system. No user interaction is required, but the attacker needs an existing local user account or foothold. Microsoft and NVD rate the issue as High (CVSS 3.1 7.8).
Microsoft · Windows
The Windows Client for NFS component contains an out-of-bounds read (CWE-125). An unauthorized attacker on the network can read small portions of heap memory, which leads to information disclosure with no impact on integrity or availability. Exploitation requires user interaction (UI:R). Microsoft rates exploitation as less likely, and no public exploit code is known.
Microsoft · Windows Client for NFS
Research and translation in progress – available shortly.
A buffer over-read in the Windows Overlay Filter component allows an attacker who already has a local, low-privileged account to elevate privileges to a higher level. The attack is local only and requires no user interaction, according to the CVSS vector. The main risk is as a second step after an attacker has already run code as a normal user, for example through phishing or a malicious attachment.
Microsoft · Windows 10 1607
