106,777 results · Clear filters · Feed
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows COM+ Event System Service Information Disclosure Vulnerability
Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.
-
Medium 6.7
Windows Installer Elevation of Privilege Vulnerability
Missing authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows Message Queuing Denial of Service Vulnerability
Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.
-
Medium 6.3
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Graphics Kernel Information Disclosure Vulnerability
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Installer Information Disclosure Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Management Services Information Disclosure Vulnerability
Use after free in Windows Management Services allows an authorized attacker to disclose information locally.
-
Medium 5.9
Windows BitLocker Security Feature Bypass Vulnerability
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.
-
Medium 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows Storport Miniport Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to execute code with a physical attack.
-
Medium 5.9
Windows Client for NFS Security Feature Bypass Vulnerability
Improper access control in Windows Client for NFS allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 4.0
Storport.sys Driver Information Disclosure Vulnerability
Out-of-bounds read in Storport.sys Driver allows an authorized attacker to disclose information with a physical attack.
-
Medium 6.5
Windows Remote Access API Tampering Vulnerability
Improper access control in Windows Remote Access API allows an authorized attacker to perform tampering locally.
-
Medium 6.6
Windows Enhanced Storage Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Enhanced Storage allows an authorized attacker to execute code with a physical attack.
-
Medium 4.7
Windows Hyper-V Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to deny service locally.
-
Medium 6.6
Windows Smart Card Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Outlook Spoofing Vulnerability
Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
KEV Nov 10, 2026 -
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 5.9
Microsoft Office Excel Information Disclosure Vulnerability
Improper control of generation of code ('code injection') in Microsoft Office Excel allows an authorized attacker to disclose information locally.
-
Medium 6.4
Azure DevOps Server Elevation of Privilege Vulnerability
Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.
-
Medium 6.5
Visual Studio Code Security Feature Bypass Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 6.5
Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability
External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network.
-
Medium 6.6
Microsoft Office Excel Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 5.9
Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to elevate privileges over a network.
-
Medium 6.5
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
.NET Security Feature Bypass Vulnerability
Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 6.5
Windows DHCP Client Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
-
Medium 6.5
Microsoft Exchange Server Spoofing Vulnerability
Cross-site request forgery (csrf) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
-
Medium 6.8
HID Parser Library Elevation of Privilege Vulnerability
Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Azure DevOps Server Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
Medium 5.3
Microsoft Office SharePoint Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.