Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

Loop with unreachable exit condition (‘infinite loop’) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Heap-based buffer overflow in Windows Win32K – GRFX allows an authorized attacker to execute code locally.

Improper control of generation of code (‘code injection’) in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.