High
CVSS: 7.8
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.
Medium
CVSS: 5.5
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.
High
CVSS: 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
High
CVSS: 7.0
Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.
Critical
CVSS: 9.8
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Medium
CVSS: 5.5
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
Critical
CVSS: 9.8
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
High
CVSS: 7.8
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
High
CVSS: 7.8
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
High
CVSS: 7.8
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
High
CVSS: 7.8
Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.
High
CVSS: 7.5
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.
High
CVSS: 7.8
Microsoft Office OneNote Remote Code Execution Vulnerability
High
CVSS: 7.8
Microsoft Outlook Remote Code Execution Vulnerability
High
CVSS: 7.8
GDI+ Remote Code Execution Vulnerability