Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally

Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally

Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally

Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally

Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally

Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally

Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally

Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows SSDP Service allows an authorized attacker to elevate privileges locally

Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally

Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally

Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally

Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally

Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally

Protection mechanism failure in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally

Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally

Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally

Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally

Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally

Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally