Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.

NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service.

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository operations as a targeted user. A format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token) must be enabled and the targeted user must have an active API key for this vulnerability to be exploitable.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally.

Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.