According to the CNA record, an unauthenticated attacker on the network can perform spoofing against Active Directory Federation Services (AD FS). No credentials or user interaction are required. A successful spoof could enable token forgery or authentication bypass for relying parties that trust the federation service, so the impact is rated high for on-premises AD FS. AD FS and Web Application Proxy servers reachable from the internet carry the highest risk.
Microsoft · Active Directory Federation Services (AD FS)
A heap-based buffer overflow in the Windows Virtualization-Based Security (VBS) Enclave allows an authorized local attacker to elevate privileges. The attacker needs existing low-privileged access to the system, for example through a compromised user account or malware. Successful exploitation can give full control over the affected system, with high impact on confidentiality, integrity and availability. The flaw is not remotely exploitable.
Microsoft · Windows
An out-of-bounds read in the Windows DNS Server role allows an authorized attacker to disclose information over the network. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) shows low complexity, low privileges, no user interaction and an impact on confidentiality only. The attacker therefore needs valid credentials or an authorized position, and the disclosed data is limited to memory contents. The main risk lies with internal DNS servers, domain controllers and file servers.
Microsoft · Windows DNS Server
A flaw in the DNS Server role of Windows allows an out-of-bounds read. An authorized attacker with a low-privilege account on the network can disclose information. Only confidentiality is affected, and no code execution is described.
Microsoft · Windows DNS Server
An out-of-bounds read in the DNS Server role of several Windows client and server versions allows an authorized attacker to disclose information over the network. The attacker needs a valid low-privilege account, requires no user interaction, and the impact is limited to confidentiality. The main risk is a compromised user account or an insider, and the risk rises if the DNS server is reachable from untrusted networks.
Microsoft · Windows DNS Server
Microsoft's advisory describes an improper access control flaw in Windows Hyper-V. An attacker with low privileges on a Hyper-V guest VM can run a specially crafted application that causes the Hyper-V host operating system to execute arbitrary code. The CVSS vector rates the attack as local with high impact on confidentiality, integrity and availability. No public exploit or proof of concept was found, and CISA SSVC rates exploitation as none.
Microsoft · Windows Hyper-V
A stack-based buffer overflow (CWE-121) in Microsoft Sysinternals Suite allows an authorized local attacker with low privileges to elevate privileges. CVSS 7.3 (High) assumes that user interaction is required and that the attacker already has local access, for example after phishing or malware infection. The flaw is not reachable from the network, and the affected version range is contradictory in the available sources.
Microsoft · Sysinternals Suite
Microsoft Sysinternals Process Monitor versions 1.0 up to but not including v4.04 contain an untrusted pointer dereference that allows an authorized local attacker to elevate privileges. The CVSS vector indicates high impact on integrity and availability, with no confidentiality impact. The attacker needs a valid low-privilege account on the system and must run in the local context; the flaw is not remotely exploitable.
Microsoft · Windows Sysinternals Process Monitor
Improper authentication in Microsoft Dynamics Business Central allows an unauthenticated attacker to disclose information over the network. Microsoft's CNA data names Dynamics NAV 2018 instead, and the affected Business Central versions are unknown, so verify which products are affected on the MSRC page. According to Microsoft, the disclosed information is file path information, which mainly helps an attacker plan further attacks. Exposure is highest where the ERP service is reachable from the internet.
Microsoft · Dynamics Business Central
A path traversal weakness (CWE-22) in Microsoft Dynamics 365 Business Central allows an authorized user with a valid account to elevate privileges over the network. The CVSS vector requires low privileges and no user interaction, with high impact on confidentiality, integrity and availability. Microsoft's CNA record lists Dynamics NAV 2018 as affected, but the affected Business Central versions could not be confirmed.
Microsoft · Dynamics 365 Business Central
A use-after-free flaw (CWE-416) in the Windows Security App allows an authorized local user to elevate privileges. The CVSS 3.1 base score is 7.0 (High). Exploitation requires a local foothold with low privileges and high attack complexity, and no user interaction is needed. The component is not internet-facing, so the risk is mainly as a second-stage escalation step on shared or weakly managed endpoints.
Microsoft · Windows Security App
A flaw in the Windows Distributed File System (DFS) allows an untrusted pointer dereference that enables an attacker to elevate privileges over the network. According to the CVE record, no privileges and no user interaction are required, so a reachable DFS service can be abused remotely. The record lists several Windows 10, Windows 11 and Windows Server releases as affected, including Windows 10 Version 1607 and Windows Server 2016. Some third-party sources list a lower CVSS score (7.5) than the 9.8 in the CVE data, so the score should be verified against the MSRC advisory.
Microsoft · Windows Distributed File System (DFS)
A use-after-free flaw (CWE-416) in the Windows Broadcast DVR User Service allows a local user with an existing low-privileged account to elevate privileges. Successful exploitation can give an attacker SYSTEM rights, for example after a phishing or account compromise. The NVD record rates it 7.0 (High) with local attack vector and high attack complexity, but the vector string in one mirror conflicts with the text, so NVD should be checked.
Microsoft · Windows
Research and translation in progress – available shortly.
Improper input validation in Microsoft SharePoint Server Subscription Edition allows an authorized attacker to disclose information over the network. The attacker needs a valid low-privilege account, but no user interaction is required, and the impact is limited to confidentiality (CVSS 6.5, Medium). The CVE text says "Office SharePoint", while the CNA data and CPE name SharePoint Server, so the SharePoint Server line is treated as the target. No exploitation is known.
Microsoft · SharePoint Server
An out-of-bounds read in Microsoft Excel, part of Microsoft 365 Apps and Office LTSC, allows remote code execution. An attacker can deliver a manipulated Excel file by email or download, and the attack needs no account on the target, but a user must open the file (CVSS 8.8, High). Sources disagree on whether this vulnerability is being exploited in the wild.
Microsoft · Excel
A heap-based buffer overflow in Microsoft Office Access allows an unauthenticated attacker to execute code remotely. Exploitation requires a user to open a crafted Access file, for example one received by email. The CVSS 3.1 base score is 8.8 (High).
Microsoft · Office Access
A heap-based buffer overflow (CWE-122) in Microsoft Office Access allows an unauthenticated attacker to execute code over a network. The attack requires a user to interact with a crafted file or document, such as an opened email attachment or download. Access is an optional component of some Office and Microsoft 365 editions, so exposure depends on whether it is installed.
Microsoft · Office Access
A integer overflow (CWE-190) and use-after-free (CWE-416) in Microsoft Office Word allow code execution when a crafted document is processed. An unauthenticated attacker can exploit this over a network, but only if a user opens the malicious file, for example one received by email or download. CISA SSVC lists no exploitation, and the vendor's exploitation status could not be verified from the sources.
Microsoft · Office Word
A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. Access is a client application, so an attacker needs to deliver a crafted file or link that a user opens (user interaction) and the attack complexity is high. No login is required once a user is reached, so email and download filtering are important.
Microsoft · Office Access
Research and translation in progress – available shortly.
A heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. Exploitation requires that a user opens a crafted presentation, for example from an email attachment, download or shared link. The CVSS 3.1 base score is 7.5 (High), with high attack complexity and required user interaction.
Microsoft · Microsoft 365 Apps
A heap-based buffer overflow in Microsoft Office Access allows an unauthenticated attacker to execute code over a network. Per the research notes, exploitation most likely requires a user to open a crafted Access file, for example one received by email or downloaded. The CVSS score is 8.8 (High). Microsoft's CISA SSVC assessment rates exploitation as none and automatability as no.
Microsoft · Office Access
A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. Exploitation requires that a user takes an action, such as opening a malicious file or document, and no privileges are needed. The NVD CVSS 3.1 base score is 8.8 (High).
Microsoft · Office Access
A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network, with a CVSS v3.1 base score of 8.8. Exploitation requires user interaction, such as opening a crafted Access file received by email, download or shared drive. Microsoft has released fixes, and no known exploitation or public proof of concept was found at the time of writing.
Microsoft · Office Access
