Microsoft Windows Server 2004

Windows Bind Filter Driver Information Disclosure Vulnerability

Windows Console Driver Denial of Service Vulnerability

Windows Desktop Bridge Denial of Service Vulnerability

Windows Console Driver Denial of Service Vulnerability

Windows Installer Spoofing Vulnerability

Active Directory Federation Server Spoofing Vulnerability

TLS Information Disclosure Vulnerability

ADFS MFA Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'.

This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'.

Active Directory Security Feature Bypass Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'.

A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'Windows Host Guardian Service Security Feature Bypass Vulnerability'.

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.