Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
Affected productsAzure Active Directory, Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems, Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
Affected productsAzure Active Directory, Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems, Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
Affected products.NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows, Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems, Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
Affected productsMicrosoft Visual Studio 2022 version 17.12, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Linux, .NET 8.0 runtime installed on Windows
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
Affected productsMicrosoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
Affected productsMicrosoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
Affected products.NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Linux, .NET 8.0 runtime installed on Windows, .NET 8.0 runtime installed on Linux
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.