106,777 results · Clear filters · Feed
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 5.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Authorization bypass through user-controlled key in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.6
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
Medium 6.1
Microsoft PowerShell Information Disclosure Vulnerability
Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over a network.
-
Medium 5.3
Windows Hyper-V Spoofing Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
-
Medium 5.9
Microsoft Configuration Manager Information Disclosure Vulnerability
Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability
Improper restriction of xml external entity reference in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Network File System Information Disclosure Vulnerability
Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Advanced Rasterization Platform Information Disclosure Vulnerability
Use of uninitialized resource in Windows Advanced Rasterization Platform allows an authorized attacker to disclose information locally.
-
Medium 5.9
Windows Deployment Services Information Disclosure Vulnerability
Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.6
Windows Smart Card Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Server for NFS Information Disclosure Vulnerability
Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locally.
-
Medium 6.6
Windows Telephony Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
Medium 5.9
Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability
Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.
-
Medium 4.7
Windows WinHTTP Information Disclosure Vulnerability
Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows CD-ROM Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows CD-ROM Driver allows an unauthorized attacker to execute code with a physical attack.
-
Medium 6.5
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
Insufficiently protected credentials in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
Microsoft Authentication Library for JavaScript Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Authentication Library for JavaScript allows an unauthorized attacker to perform spoofing over a network.
-
Medium 6.5
Windows Active Directory Denial of Service Vulnerability
No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network.
-
Medium 5.9
Windows DHCP Server Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
-
Medium 4.3
Windows Smart Card Information Disclosure Vulnerability
Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical attack.
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vu…
-
Medium 5.5
Mailslot File System Information Disclosure Vulnerability
Use of uninitialized resource in Mailslot File System allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Print Spooler Components Information Disclosure Vulnerability
External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows System Events Broker Information Disclosure Vulnerability
Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Encrypting File System (EFS) Denial of Service Vulnerability
Untrusted pointer dereference in Windows Encrypting File System (EFS) allows an authorized attacker to deny service locally.
-
Medium 5.0
Windows Shell Information Disclosure Vulnerability
Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally.
-
Medium 5.3
Microsoft Remote Registry Service Denial of Service Vulnerability
Out-of-bounds read in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
-
Medium 6.6
Windows Partition Management Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Telephony Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.